Kafka 2.3 - SASL_SSL

Hi,

I have configured the brokers and zookeepers as below to enable SSL and
authentication with SASL/Kerberos. I have tried with and without
advertised.listeners, advertised.host.name, host.name, port.

*server.properties*

listeners=SASL_SSL://<hostname>:9092
advertised.listeners=SASL_SSL://<hostname>:9092

advertised.host.name=<hostname>
host.name=<hostname>
port=9092

ssl.truststore.location=kafka.server.truststore.jks
ssl.truststore.password=password
ssl.keystore.location=kafka.server.keystore.jks
ssl.keystore.password=password
ssl.key.password=password

security.inter.broker.protocol=SASL_SSL
sasl.mechanism.inter.broker.protocol=GSSAPI
sasl.enabled.mechanisms=GSSAPI
sasl.kerberos.service.name=HTTP

allow.everyone.if.no.acl.found=true

zookeeper.set.acl=true
authorizer.class.name=kafka.security.auth.SimpleAclAuthorizer
super.users=User:kafka;User:admin

*zookeeper.properties*

authProvider.1=org.apache.zookeeper.server.auth.SASLAuthenticationProvider
requireClientAuthScheme=sasl
jaasLoginRenew=3600000

quorum.auth.enableSasl=true
quorum.auth.learnerRequireSasl=true
quorum.auth.serverRequireSasl=true
quorum.auth.learner.loginContext=QuorumLearner
quorum.auth.server.loginContext=QuorumServer
quorum.cnxn.threads.size=20

I have all the brokers and zookeepers configured similarly except for the
hostname.

Unfortunately I am unable to run my client. Below is error with consumer

kafkacat -b <hostname> -P -X security.protocol=SASL_SSL -X
sasl.mechanisms=GSSAPI -X sasl.kerberos.keytab=krb5.keytab -X
sasl.kerberos.service.name=HTTP -X
sasl.kerberos.principal=HTTP/<hostname>/<domain> -t test -C

% ERROR: Topic test error: Broker: Leader not available

Any suggestions?

Thanks
AA