Major Description
The JAAS + Kerberos authentication in KerberosLogin.java class, when obtaining Kerberos TGT, makes use of the client-provided callback handler. This is a must-have when the security configuration is not default.
However, the same code, when it is time to renew the Kerberos TGT ticket, ignores the provided callback. That works OK for default configuration (JAAS configuration, Kerberos config and keytab are available).
But when the security configuration sources are custom, and the default Kerberos code is not supporting them, the callback is to be used even for TGT refresh to obtain the configuration properties.
A fix is done to pass the same callback handler in KerberosLogin::reLogin and store the callback handler in the super class AbstractLogin, similar to contextName and configuration.
The fix is in PR https://github.com/apache/kafka/pull/13081
It is tested in our SFT environments and works fine.