Hi @mlussana1,   I have configured Kafka(2.2.0) with Sentry enabled in Kerberized environment and be able to use it as channel for Flume in CDH 5.13.   First of all did you add the kafka to the Allowed Connecting Users(sentry.service.allow.connect) in sentry configuration?And in order to give privilege your user must be in one of the sentry admin groups which are listed in  Admin Groups(sentry.service.admin.group) configuration.Those may cause the sentry shell problem.   For the producer problem ,I am not sure but you may modify the jass.conf file as follows:   KafkaClient { com.sun.security.auth.module.Krb5LoginModule required useKeyTab=false useTicketCache=true serviceName="kafka" principal="username@xxxx.xxx"; }; Client { com.sun.security.auth.module.Krb5LoginModule required useKeyTab=false useTicketCache=true serviceName="zookeeper" principal="username@xxxx.xxx"; };     And I run the consumer and producer from command line as follows:   kafka-console-consumer  --topic topicname  --from-beginning --bootstrap-server brokerhostname:9092 --consumer.config consumer.properties kafka-console-producer --broker-list [brokers]:9092 --topic topicname --producer.config client.properties   I hope these would help.   ... View more