Skip to content

KAFKA-10798; Ensure response is delayed for failed SASL authentication with connection close delay#9678

Merged
rajinisivaram merged 1 commit into
apache:trunkfrom
rajinisivaram:KAFKA-10798-delay-auth
Dec 7, 2020
Merged

KAFKA-10798; Ensure response is delayed for failed SASL authentication with connection close delay#9678
rajinisivaram merged 1 commit into
apache:trunkfrom
rajinisivaram:KAFKA-10798-delay-auth

Conversation

@rajinisivaram

Copy link
Copy Markdown
Contributor

Committer Checklist (excluded from commit message)

  • Verify design and implementation
  • Verify test coverage and CI build status
  • Verify documentation (including upgrade notes)

@omkreddy omkreddy left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@rajinisivaram Thanks for the PR. LGTM.

@rajinisivaram

Copy link
Copy Markdown
Contributor Author

@omkreddy Thanks for the review, merging to trunk.

@rajinisivaram
rajinisivaram merged commit b8ebcc2 into apache:trunk Dec 7, 2020
rajinisivaram added a commit that referenced this pull request Dec 16, 2020
…n with connection close delay (#9678)

Reviewers: Manikumar Reddy <manikumar.reddy@gmail.com>
rajinisivaram added a commit that referenced this pull request Dec 16, 2020
…n with connection close delay (#9678)

Reviewers: Manikumar Reddy <manikumar.reddy@gmail.com>
@efajunk

efajunk commented Apr 18, 2023

Copy link
Copy Markdown

Hello!
I'm not sure that the reason is still here, but we have exactly SASL authentication and the delay "still" doesn't work.
Our Kafka version is 3.3. We see in logs that it's definitely applied, but with no effect(

2023-04-17 14:58:36,322 INFO KafkaConfig values: 
...
	connection.failed.authentication.delay.ms = 1000
...

Log shows nonstop authorization attempts. One per 10 milliseconds (log ex below). Errors rate for the same topic is kept at the 1-2k per minute.

2023-04-17 15:02:45,266 INFO Principal = User:same_user is Denied Operation = Describe from host = x.x.x.x(same_ip) on resource = Topic:LITERAL:same_topic for request = Metadata with resourceRefCount = 1 (kafka.authorizer.logger) [handler-0]
2023-04-17 15:02:45,268 INFO Principal = User:same_user is Denied Operation = Describe from host = x.x.x.x(same_ip) on resource = Topic:LITERAL:same_topic for request = Metadata with resourceRefCount = 1 (kafka.authorizer.logger) [handler-3]
2023-04-17 15:02:45,268 INFO Principal = User:same_user is Denied Operation = Describe from host = x.x.x.x(same_ip) on resource = Topic:LITERAL:same_topic for request = Metadata with resourceRefCount = 1 (kafka.authorizer.logger) [handler-10]
2023-04-17 15:02:45,269 INFO Principal = User:same_user is Denied Operation = Describe from host = x.x.x.x(same_ip) on resource = Topic:LITERAL:same_topic for request = Metadata with resourceRefCount = 1 (kafka.authorizer.logger) [handler-11]

Maybe there is still another config to make the delay work?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants