@cmcbugg You can use the following jvm options to add additional logging for Kerberos: -Dsun.security.krb5.debug=true -Dsun.security.jgss.debug=true -Djavax.net.debug=all When you run your kafka process at DEBUG log level, it should ideally log the kerberos ticket exchange, which will contain the KDC coordinates. Hope this helps ... View more