PH63373: ENABLE PASSWORD BASED OAUTH AUTHENTICATION ALONG WITH CURL OPTS SUPPORT.

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• Kafka update:
  Introduce these new configuration properties. support password
  based OAUTH authentication for Kafka connection. introduce a
  new configuration parameter sasl.oauthbearer.grant_type, to
  enable password or client_authentication OAUTH support.
  
  Enable CURL options for the sasl.oauthbearer.token.endpoint.url
  parameter.
  
  Introduce a new configuration parameter sasl.oauthbearer.curl.
  opts, to support various CURL options for the sasl.oauthbearer
  .token.endpoint.url, such as setting the CA file for HTTPS
  URLs, among other options.
  
  Introduce a new configuration parameter, sasl.oauthbearer.
  principal.name, which allows specifying the principal claim
  name used to extract the value of the principal claim.
  
  Enable the KAFKA_HOME environment variable for the utility to
  allow the utility to be executed from any directory.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users who are interested in SASL OAUTH can   *
  *                 apply this APAR to enable https based        *
  *                 connection to OAuth provider                 *
  ****************************************************************
  * PROBLEM DESCRIPTION: Users have requested samples for using  *
  *                      SASL OAUTH with https based connection  *
  *                      to OAuth provider.                      *
  ****************************************************************
  * RECOMMENDATION: Apply this PTF.                              *
  ****************************************************************
  N/A
  

Problem conclusion

• This APAR provides
  
  Update to COBOL sample code: A new COBOL sample has been added
  that reads Kafka configurations from a file.
  
  Support for password-based OAuth authentication for Kafka
  connections: A new configuration parameter, sasl.oauthbearer.
  grant_type, has been introduced to enable password and client
  authentication support.
  
  Enable CURL options for the sasl.oauthbearer.token.endpoint.url
  parameter: A new configuration parameter, sasl.oauthbearer.curl
  .opts, has been added to support various CURL options for the
  sasl.oauthbearer.token.endpoint.url, such as setting the CA
  file for HTTPS URLs, among other options.
  
  Library upgrade: The SDK is built on the librdkafka library,
  which has been upgraded to version 2.5.0 in this release.
  
  KAFKA_HOME environment variable support: The utility now
  supports the KAFKA_HOME environment variable, allowing it to be
  executed from any directory.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI99468

Modules/Macros

• IXYCA2E  IXYCBAT  IXYCBK1  IXYCCLOS IXYCCONF IXYCE2A  IXYCNS31
  IXYCNS64 IXYCON31 IXYCON64 IXYCONCB IXYCONF  IXYCONSI IXYCONSO
  IXYCONSP IXYCONST IXYCONSU IXYCOPY  IXYCPOLL IXYCSET  IXYDEST
  IXYDLCB  IXYER2NM IXYER2ST IXYFLUSH IXYFUNC  IXYHDADD IXYHDDES
  IXYHDGET IXYHDGTA IXYHDGTL IXYHDNEW IXYHDREM IXYISMKD IXYJCN31
  IXYJCN64 IXYJCNTL IXYJCONS IXYJCS31 IXYJCS64 IXYJPO31 IXYJPO64
  IXYJPR31 IXYJPR64 IXYJPRDS IXYJPROD IXYJPS31 IXYJRC31 IXYJRC64
  IXYJRNCN IXYJRNPR IXYJRNPS IXYJRNVR IXYJRO31 IXYJRO64 IXYJRP31
  IXYJRP64 IXYJRS31 IXYJRS64 IXYJSFNC IXYJVER  IXYKNEW  IXYLDEST
  IXYMDEST IXYMESSG IXYMKDIR IXYMSGCB IXYOUTQL IXYPCONF IXYPHPAX
  IXYPOLL  IXYPOLSC IXYPRD31 IXYPRD64 IXYPRDSI IXYPRO31 IXYPRO64
  IXYPROD  IXYPRODB IXYPRODI IXYPRODV IXYPROTP IXYPRS31 IXYSCONS
  IXYSDEF  IXYSNPAX IXYSPRDS IXYSPROD IXYSUBCR IXYSVER  IXYTDEST
  IXYTOPIC IXYTPADD IXYTPLST IXYVER   IXYWACPT IXYWALOC IXYWAPLY
  IXYWDDEF IXYWRECV IXYWSMPE IXYWZFS
  

Fix information

• Fixed component name

  OPEN ENT SDK KA

• Fixed component ID

  5655KAF00

Applicable component levels

• R110 PSY UI99468

     UP25/01/31 P F501

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.