Skip to content

Add DisablePAFXFAST option to kafka exporter #26345

Closed
@swythan

Description

@swythan

Component(s)

exporter/kafka

Is your feature request related to a problem? Please describe.

When attempting to use kerberos authentication against ActiveDirectotry in the kafka exporter, I get the following error:

[Root cause: KRBMessage_Handling_Error] KRBMessage_Handling_Error: AS Exchange Error: AS_REP is not valid or client password/keytab incorrect < KRBMessage_Handling_Error: KDC did not respond appropriately to FAST negotiation

I'm told that this is because our ActiveDirectory controller doesn't support FAST.

Describe the solution you'd like

Looking further it seems that the sarama library added an option for this, so hopefully it should just be a question of plumbing the config through.

Sarama PR: IBM/sarama#1466
Sarama config docs: https://pkg.go.dev/github.com/IBM/sarama#GSSAPIConfig.DisablePAFXFAST

Describe alternatives you've considered

No response

Additional context

No response

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions