App Connect

App Connect

Join this online user group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  SCRAM SHA 512 how to use in Kafka nodes

    Posted Fri May 01, 2020 03:44 PM

    I am trying to connect to a Kafka server with SCRAM SHA 512 authentication with TLS set to false.

    With an external client with below configuration, connection is successful but with ACE toolkit -Kafka nodes I am not able to achieve this.

    security.protocol=SASL_PLAINTEXT

    sasl.mechanism=SCRAM-SHA-512

    sasl.jaas.config=org.apache.kafka.common.security.scram.ScramLoginModule required username="user" password="password";


    I have tried to create kafka.properties with these configurations and put it in ADVANCED tab. Also, have everything defined in a policy.

    I am getting the error:
    org.apache.kafka.common.errors.UnsupportedSaslMechanismException: Clinet SASL mechanism 'PLAIN' not enabled in the server, enabled mechanisms are SCRAM SHA 512.

    Have tried using SASL_SSL as well but no success. 

    Thanks.



    ------------------------------
    Amrita Singh
    ------------------------------


  • 2.  RE: SCRAM SHA 512 how to use in Kafka nodes

    Posted Mon May 04, 2020 08:14 AM

    Hi Amrita,

    Did you try "SCRAM_SHA_512" (instead of SCRAM-SHA-512)?

    I believe there were updates to the Kafka client in ACE in the most recent fixpacks. Are you at 11.0.0.7 or higher?

    Regards,
     
    CHRISTOPHER FRANK
    Technical Sales Specialist • IBM Hybrid Cloud – Integration

    Work: 1-612-397-5532
    Mobile:     1-612-669-3008
    E-mail:     chrisfra@us.ibm.com

    "Amrita Singh via IBM Community" ---05/01/2020 02:44:26 PM---I am trying to connect to a Kafka server with SCRAM SHA 512 authentication with TLS set to false. Wi




    Original Message


  • 3.  RE: SCRAM SHA 512 how to use in Kafka nodes

    Posted Mon May 04, 2020 08:55 AM
    Hi,

    Chris is correct that we did add enhancements to our Kafka capabilities in 11.0.0.7 but these did not include support for SCRAM. We are actually working on this right now, so whilst we cannot commit futures to a specific date, we expect to add support soon.

    Cheers,
    Ben

    ------------------------------
    Ben Thompson
    IBM UK
    ------------------------------

    Original Message


  • 4.  RE: SCRAM SHA 512 how to use in Kafka nodes

    Posted Tue May 05, 2020 03:10 AM
    Thanks Chris and Ben!


    ------------------------------
    Amrita Singh
    ------------------------------

    Original Message


  • 5.  RE: SCRAM SHA 512 how to use in Kafka nodes

    Posted Tue May 05, 2020 03:12 AM
    Edited by Amrita Singh Tue May 05, 2020 03:30 AM
    Thanks Chris and Ben!

    I tried using SCRAM_SHA_512  but it also didn't work. I am using 11.0.0.7 ACE version. Does higher versions have SCRAM capability?

    I tried 11.0.0.8 as well to what Chris suggested, it didn't work!



    ------------------------------
    Amrita Singh
    ------------------------------

    Original Message