Page History

...

• Name: sasl.client.callback.handler.class
• Type: CLASS
• Doc: A Sasl client callback handler class that implements the org.apache.kafka.common.security.auth.AuthenticateCallbackHandler interface.
  

Server callback handler classes (for brokers only) 

• Name: sasl.server.callback.handler.class.map
• Type: STRING
• Doc: A map between Sasl mechanisms and Sasl server callback handler classes that implement the AuthenticateCallbackHandler interface. Key and value are separated by a colon and map entries are separated by commas. For example, PLAIN=CustomPlainCallbackHandler,SCRAM-SHA-256=CustomScramCallbackHandler.

...

Callback handlers which require additional options at runtime (eg. URL of a credential server) may include arguments in the JAAS configuration using the config file or sasl.jaas.config property (KIP-85). This is similar to the way keytab location is configured for GSSAPI. Client callback handlers can retrieve Subject using  Subject.getSubject(AccessController.getContext()) to obtain credentials populated by the login module.

...