I've followed this: http://docs.confluent.io/current/kafka/sasl.html#sasl-configuration-for-kafka-brokers
To configure SASL authentication to my Kafka cluster. I'd like to have all my clients authenticate to the brokers through SASL. I don't care about kafka<->zookeeper. The reason is I need to create ACL's in Kafka. The issue arises when starting the Kafka cluster and receiving an error about not being able to authenticate to Zookeeper:
SASL configuration failed: javax.security.auth.login.LoginException: No JAAS configuration section named 'Client' was found in specified JAAS configuration file: '/etc/kafka/kafka_server_jaas.conf'. Will continue connection to Zookeeper server without SASL authentication, if Zookeeper server allows it. Opening socket connection to server zk-2.zookeeper-service.default.svc.cluster.local/100.96.16.2:2181 Error occurred while connecting to Zookeeper server[zk-0.zookeeper-service:2181,zk-1.zookeeper-service:2181,zk-2.zookeeper-service:2181]. Authentication failed.
I haven't configured Zookeeper for SASL authentication and would rather avoid if I could. Is this possible at all?