title: Zookeeper and Kafka with SASL security
body: <p>I've setup a Kafka cluster with <a href="https://cwiki.apache.org/confluence/display/KAFKA/KIP-84%3A+Support+SASL+SCRAM+mechanisms" rel="nofollow noreferrer">SASL SCRAM</a> security, and it's working fine. </p>
  
  <p>Per the documentation, I have used the command <code>kafka-configs.sh</code> to create a username and password and grant that user access to a topic.  </p>
  
  <p>That also works great.</p>
  
  <p>However, the <code>kafka-configs.sh</code> command doesn't require any kind of authentication itself, so it occurs to me that ANYONE could run that command and create their own user in Kafka and grant their own permissions.</p>
  
  <p>Perhaps I need to enable SASL security on Zookeeper? But I can't find any consistent or working documentation on how to do that. Adding properties to <code>zookeeper.config</code> like <code>requireclientauthscheme=sasl</code> doesn't seem to do anything.  Or at least it doesn't stop <code>kafka-configs.sh</code> from creating new users in zookeeper without any sort of authentication.</p>
  
  <p>Am I even going down a viable path here?  Or do I need to back up and do something different?</p>
  
  <p>For reference, I'm using Kafka 1.0.0 and Zookeper 3.4.11.  But I'm flexible on versions if some other version works better.</p>
  
  <p>Any help appreciated!  :)</p>
  
  <p>Thanks!</p>