Enable GSSAPI authentication when Kerberos is configured (elastic#17470)

(cherry picked from commit 5ca0e4c)
kvch · Apr 3, 2020 · 110be53 · 110be53
1 parent df96f62
commit 110be53
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/filebeat/input/kafka/config.go b/filebeat/input/kafka/config.go
@@ -182,6 +182,9 @@ func newSaramaConfig(config kafkaInputConfig) (*sarama.Config, error) {
 
 	if config.Kerberos != nil {
 		cfgwarn.Beta("Kerberos authentication for Kafka is beta.")
+
+		k.Net.SASL.Enable = true
+		k.Net.SASL.Mechanism = sarama.SASLTypeGSSAPI
 		k.Net.SASL.GSSAPI = sarama.GSSAPIConfig{
 			AuthType:           int(config.Kerberos.AuthType),
 			KeyTabPath:         config.Kerberos.KeyTabPath,

diff --git a/libbeat/outputs/kafka/config.go b/libbeat/outputs/kafka/config.go
@@ -176,6 +176,9 @@ func newSaramaConfig(log *logp.Logger, config *kafkaConfig) (*sarama.Config, err
 
 	if config.Kerberos != nil {
 		cfgwarn.Beta("Kerberos authentication for Kafka is beta.")
+
+		k.Net.SASL.Enable = true
+		k.Net.SASL.Mechanism = sarama.SASLTypeGSSAPI
 		k.Net.SASL.GSSAPI = sarama.GSSAPIConfig{
 			AuthType:           int(config.Kerberos.AuthType),
 			KeyTabPath:         config.Kerberos.KeyTabPath,