4 ?    ?陙 ? ` ?  ?       SASL_MECHANISMLjava/lang/String; ConstantValueSASL_MECHANISM_DOCGSSAPI_MECHANISMDEFAULT_SASL_MECHANISMSASL_ENABLED_MECHANISMS DeprecatedRuntimeVisibleAnnotationsLjava/lang/Deprecated;SASL_ENABLED_MECHANISMS_DOCDEFAULT_SASL_ENABLED_MECHANISMSLjava/util/List; Signature$Ljava/util/List;SASL_JAAS_CONFIGSASL_JAAS_CONFIG_DOC"SASL_CLIENT_CALLBACK_HANDLER_CLASS&SASL_CLIENT_CALLBACK_HANDLER_CLASS_DOC!SASL_LOGIN_CALLBACK_HANDLER_CLASS%SASL_LOGIN_CALLBACK_HANDLER_CLASS_DOCSASL_LOGIN_CLASSSASL_LOGIN_CLASS_DOCSASL_KERBEROS_SERVICE_NAMESASL_KERBEROS_SERVICE_NAME_DOCSASL_KERBEROS_KINIT_CMDSASL_KERBEROS_KINIT_CMD_DOCDEFAULT_KERBEROS_KINIT_CMD(SASL_KERBEROS_TICKET_RENEW_WINDOW_FACTOR,SASL_KERBEROS_TICKET_RENEW_WINDOW_FACTOR_DOC+DEFAULT_KERBEROS_TICKET_RENEW_WINDOW_FACTORD!SASL_KERBEROS_TICKET_RENEW_JITTER%SASL_KERBEROS_TICKET_RENEW_JITTER_DOC$DEFAULT_KERBEROS_TICKET_RENEW_JITTER%SASL_KERBEROS_MIN_TIME_BEFORE_RELOGIN)SASL_KERBEROS_MIN_TIME_BEFORE_RELOGIN_DOC(DEFAULT_KERBEROS_MIN_TIME_BEFORE_RELOGINJ SASL_LOGIN_REFRESH_WINDOW_FACTOR$SASL_LOGIN_REFRESH_WINDOW_FACTOR_DOC#DEFAULT_LOGIN_REFRESH_WINDOW_FACTOR SASL_LOGIN_REFRESH_WINDOW_JITTER$SASL_LOGIN_REFRESH_WINDOW_JITTER_DOC#DEFAULT_LOGIN_REFRESH_WINDOW_JITTER%SASL_LOGIN_REFRESH_MIN_PERIOD_SECONDS)SASL_LOGIN_REFRESH_MIN_PERIOD_SECONDS_DOC(DEFAULT_LOGIN_REFRESH_MIN_PERIOD_SECONDSS<!SASL_LOGIN_REFRESH_BUFFER_SECONDS%SASL_LOGIN_REFRESH_BUFFER_SECONDS_DOC$DEFAULT_LOGIN_REFRESH_BUFFER_SECONDS,&SASL_KERBEROS_PRINCIPAL_TO_LOCAL_RULES*SASL_KERBEROS_PRINCIPAL_TO_LOCAL_RULES_DOC.DEFAULT_SASL_KERBEROS_PRINCIPAL_TO_LOCAL_RULES()VCodeLineNumberTableLocalVariableTablethis,Lorg/apache/kafka/common/config/SaslConfigs;addClientSaslSupport-(Lorg/apache/kafka/common/config/ConfigDef;)Vconfig*Lorg/apache/kafka/common/config/ConfigDef; SourceFileSaslConfigs.java*org/apache/kafka/common/config/SaslConfigs>org/apache/kafka/common/config/internals/BrokerSecurityConfigs }~sasl.kerberos.service.name  wThe Kerberos principal name that Kafka runs as. This can be defined either in Kafka's JAAS config or in Kafka's config. sasl.kerberos.kinit.cmd/usr/bin/kinit Kerberos kinit command path.(sasl.kerberos.ticket.renew.window.factor  Login thread will sleep until the specified window factor of time from last refresh to ticket's expiry has been reached, at which time it will try to renew the ticket.!sasl.kerberos.ticket.renew.jitter6Percentage of random jitter added to the renewal time.%sasl.kerberos.min.time.before.relogin  1Login thread sleep time between refresh attempts. sasl.login.refresh.window.factor QLogin refresh thread will sleep until the specified window factor relative to the credential's lifetime has been reached, at which time it will try to refresh the credential. Legal values are between 0.5 (50%) and 1.0 (100%) inclusive; a default value of 0.8 (80%) is used if no value is specified. Currently applies only to OAUTHBEARER.  sasl.login.refresh.window.jitterThe maximum amount of random jitter relative to the credential's lifetime that is added to the login refresh thread's sleep time. Legal values are between 0 and 0.25 (25%) inclusive; a default value of 0.05 (5%) is used if no value is specified. Currently applies only to OAUTHBEARER.%sasl.login.refresh.min.period.seconds   The desired minimum time for the login refresh thread to wait before refreshing a credential, in seconds. Legal values are between 0 and 900 (15 minutes); a default value of 60 (1 minute) is used if no value is specified. This value and sasl.login.refresh.buffer.seconds are both ignored if their sum exceeds the remaining lifetime of a credential. Currently applies only to OAUTHBEARER.!sasl.login.refresh.buffer.seconds:The amount of buffer time before credential expiration to maintain when refreshing a credential, in seconds. If a refresh would otherwise occur closer to expiration than the number of buffer seconds then the refresh will be moved up to maintain as much of the buffer time as possible. Legal values are between 0 and 3600 (1 hour); a default value of 300 (5 minutes) is used if no value is specified. This value and sasl.login.refresh.min.period.seconds are both ignored if their sum exceeds the remaining lifetime of a credential. Currently applies only to OAUTHBEARER.sasl.mechanismGSSAPISASL mechanism used for client connections. This may be any mechanism for which a security provider is available. GSSAPI is the default mechanism.sasl.jaas.config 9JAAS login context parameters for SASL connections in the format used by JAAS configuration files. JAAS configuration file format is described here. The format for the value is: 'loginModuleClass controlFlag (optionName=optionValue)*;'. For brokers, the config must be prefixed with listener prefix and SASL mechanism name in lower-case. For example, listener.name.sasl_ssl.scram-sha-256.sasl.jaas.config=com.example.ScramLoginModule required;"sasl.client.callback.handler.class {The fully qualified name of a SASL client callback handler class that implements the AuthenticateCallbackHandler interface.!sasl.login.callback.handler.classrThe fully qualified name of a SASL login callback handler class that implements the AuthenticateCallbackHandler interface. For brokers, login callback handler config must be prefixed with listener prefix and SASL mechanism name in lower-case. For example, listener.name.sasl_ssl.scram-sha-256.sasl.login.callback.handler.class=com.example.CustomScramLoginCallbackHandlersasl.login.classThe fully qualified name of a class that implements the Login interface. For brokers, login config must be prefixed with listener prefix and SASL mechanism name in lower-case. For example, listener.name.sasl_ssl.scram-sha-256.sasl.login.class=com.example.CustomScramLogin MN |Njava/lang/Objectsasl.enabled.mechanismsThe list of SASL mechanisms enabled in the Kafka server. The list may contain any mechanism for which a security provider is available. Only GSSAPI is enabled by default.&sasl.kerberos.principal.to.local.rulesgA list of rules for mapping from principal names to short names (typically operating system usernames). The rules are evaluated in order and the first rule that matches a principal name is used to map it to a short name. Any later rules in the list are ignored. By default, principal names of the form {username}/{hostname}@{REALM} are mapped to {username}. For more details on the format please see security authorization and acls. Note that this configuration is ignored if an extension of KafkaPrincipalBuilder is provided by the principal.builder.class configuration.-org/apache/kafka/common/config/ConfigDef$TypeType InnerClassesSTRING/Lorg/apache/kafka/common/config/ConfigDef$Type;3org/apache/kafka/common/config/ConfigDef$Importance ImportanceMEDIUM5Lorg/apache/kafka/common/config/ConfigDef$Importance;(org/apache/kafka/common/config/ConfigDefdefine(Ljava/lang/String;Lorg/apache/kafka/common/config/ConfigDef$Type;Ljava/lang/Object;Lorg/apache/kafka/common/config/ConfigDef$Importance;Ljava/lang/String;)Lorg/apache/kafka/common/config/ConfigDef;LOWDOUBLEjava/lang/DoublevalueOf(D)Ljava/lang/Double;LONGjava/lang/Long(J)Ljava/lang/Long;.org/apache/kafka/common/config/ConfigDef$RangeRangebetweenV(Ljava/lang/Number;Ljava/lang/Number;)Lorg/apache/kafka/common/config/ConfigDef$Range; Validator(Ljava/lang/String;Lorg/apache/kafka/common/config/ConfigDef$Type;Ljava/lang/Object;Lorg/apache/kafka/common/config/ConfigDef$Validator;Lorg/apache/kafka/common/config/ConfigDef$Importance;Ljava/lang/String;)Lorg/apache/kafka/common/config/ConfigDef;SHORTjava/lang/Short(S)Ljava/lang/Short;java/lang/Integer(I)Ljava/lang/Integer;PASSWORDCLASS2org/apache/kafka/common/config/ConfigDef$Validator!?,@AB.CAB0DAB/EAB/FABGHIJKABLHIJMNHOPIJQAB1RAB3SAB4TAB6UAB7VAB8WAB9XAB:YABZAB[AB \AB ]AB ^AB _AB`aBbABcABdaBeABfABghBiABjAB!kaBlAB#mAB&naBoAB'pAB+qrBstAB,uAB-vrBwxAByHIJzAB{HIJ|NHOPIJ}~/*  *        !"#$ &"'(<)** +",(,)** -"./012345675895:W>&9L_  ~) ;<=> 0"@@