Kafka Ranger authentication with username/password

We would like to be able to authenticate users to our kafka cluster with simple username/password. We installed HDF-3.0.1.1 Kafka, kerberized the cluster, installed ranger + kafka-plugin and added a user 'test'. We set sasl.enabled.mechanisms=GSSAPI, PLAIN sasl.mechanism.inter.broker.protocol=GSSAPI in kafka server.properties to allow the cluster to use kerberos and clients to use PLAIN authentication. But this does not work. The console-producer logs INFO Successfully logged in. (org.apache.kafka.common.security.authenticator.AbstractLogin) and after a while: ERROR Error when sending message to topic testtopic2 with key: null, value: 28 bytes with error: (org.apache.kafka.clients.producer.internals.ErrorLoggingCallback) org.apache.kafka.common.errors.TimeoutException: Failed to update metadata after 60000 ms. INFO Closing the Kafka producer with timeoutMillis = 9223372036854775807 ms. (org.apache.kafka.clients.producer.KafkaProducer) In the meantime it continuously tries to connect to the kafka hosts. The producer properties are: sasl.mechanism=PLAIN security.protocol=SASL_PLAINTEXT and our kafka_client_jaas.conf look like this: KafkaClient { org.apache.kafka.common.security.plain.PlainLoginModule required username="test" password="XXXXXXXXX"; }; What is going wrong here or is it simply not possible to use username/password authentication with the kafka ranger plugin? Kind Regards Peter ... View more