How to Connect Ignition Kafka Connector to Kerberos-Secured Kafka (SASL/GSSAPI)?

Ignition
1

Hello everyone,

I’m trying to connect Ignition (8.3.x) to a Kerberos-secured Kafka cluster using SASL/GSSAPI.
I have:

  • keytab file

  • krb5.ini

  • correct principal

  • MIT Kerberos installed

  • bootstrap servers reachable

  • kinit -kt works successfully

But Ignition keeps failing with errors like:

No serviceName defined in either JAAS or Kafka config
Value not specified for key 'null'

My Custom Client Properties currently looks like this (single-line JAAS):

security.protocol=SASL_SSL
sasl.mechanism=GSSAPI
sasl.kerberos.service.name=kafka
sasl.jaas.config=com.sun.security.auth.module.Krb5LoginModule required useKeyTab=true storeKey=true keyTab="C:/Program Files/Inductive Automation/Ignition/data/pdmandon.keytab" principal="pdmandon@xxx.x.tr";

Has anyone successfully connected Ignition to a Kerberos-enabled Kafka cluster?
Any working examples or advice would be greatly appreciated.

Thanks!