# Configuring Kafka Input with SASL PLAINTEXT auth

**URL:** https://discuss.elastic.co/t/configuring-kafka-input-with-sasl-plaintext-auth/219485
**Category:** Logstash
**Created:** [February 15, 2020, 4:51pm UTC](https://discuss.elastic.co/t/configuring-kafka-input-with-sasl-plaintext-auth/219485 "2020-02-15T16:51:04Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![chadskidmore](https://avatars.discourse-cdn.com/v4/letter/c/3ec8ea/32.png) [@chadskidmore](https://discuss.elastic.co/u/chadskidmore)
#### Post date: [February 15, 2020, 4:51pm UTC](https://discuss.elastic.co/t/configuring-kafka-input-with-sasl-plaintext-auth/219485/1 "2020-02-15T16:51:05Z")

</div>

Having some struggles getting kafka-input setup in logstash with SASL PLAINTEXT. Documentation seems to be largely non-existent. I did seem to get Beats sending data in to Kafka with this auth scheme.

The input is pretty basic:  
input {  
kafka {  
bootstrap\_servers =\> "10.99.250.74:9092"  
topics =\> ["beats-llk"]  
sasl\_jaas\_config =\> "org.apache.kafka.common.security.plain.PlainLoginModule required username='admin' password='SOMEPASS';"  
sasl\_mechanism =\> "PLAIN"  
group\_id =\> "logstash-llk"  
}  
}

I have tried using a specific user for logstash that limits access via ACL to just the topics we want it to touch and that was failing so I opened it up to the main admin/superuser password just to try and eliminate ACL issues. In the kafka server I am seeing the following messages stream out:

`[2020-02-15 08:31:44,680] INFO [SocketServer brokerId=1] Failed authentication with /10.99.242.21 (Unexpected Kafka request of type METADATA during SASL handshake.) (org.apache.kafka.common.network.Selector)`

Any suggestions or pointers to something better than super basic docs would be appreciated.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 14, 2020, 4:51pm UTC](https://discuss.elastic.co/t/configuring-kafka-input-with-sasl-plaintext-auth/219485/2 "2020-03-14T16:51:05Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
