Uploaded image for project: 'Kafka'
  1. Kafka
  2. KAFKA-13241

Name resolution should be disabled during SASL authentication

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Open
    • Minor
    • Resolution: Unresolved
    • 2.8.0
    • None
    • network
    • None
    • Redhat linux

    Description

       LoginManager loginManager = loginManagers.get(clientSaslMechanism);
                      authenticatorCreator = () -> buildClientAuthenticator(configs,
                              saslCallbackHandlers.get(clientSaslMechanism),
                              id,
                              socket.getInetAddress().getHostName(),
                              loginManager.serviceName(),
                              transportLayer,
                              subjects.get(clientSaslMechanism));

      When using SASL authentication, kafka will always try to do hostname resolution when build client authenticator, this is unnecessary, if we use ip to connect to kafka server, and didn't config kafka server hostname resolution, kafka client will suck here for about 10s, and then timeout with java.net.UnknownHostException but client can auth success anyway.

      Attachments

        Activity

          People

            Unassigned Unassigned
            AndrewDi AndrewDi
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:

              Time Tracking

                Estimated:
                Original Estimate - 6h
                6h
                Remaining:
                Remaining Estimate - 6h
                6h
                Logged:
                Time Spent - Not Specified
                Not Specified