1. Create a jaas.conf file with the following contents: KafkaClient { com.sun.security.auth.module.Krb5LoginModule required useKeyTab=true keyTab="keytabFile.keytab" storeKey=true useTicketCache=false serviceName="kafka" debug=true principal="[email protected]"; }; Client { com.sun.security.auth.module.Krb5LoginModule required useKeyTab=true keyTab="keytabFile.keytab" storeKey=true useTicketCache=false debug=true principal="[email protected]"; }; 2. Create a properties file (say "consumer.properties") with the following contents: security.protocol=SASL_PLAINTEXT sasl.kerberos.service.name=kafka 3. Then at the terminal run the following command: export KAFKA_OPTS="-Djava.security.auth.login.config=./jaas.conf" 4. Execute the Kafka-console-consumer script: kafka-console-consumer --topic <topic-name> --from-beginning --bootstrap-server <anybroker>:9092 --consumer.config ./consumer.properties