Mailing-List: contact issues-help@flink.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@flink.apache.org
Date: Thu, 28 Apr 2016 17:08:12 +0000 (UTC)
From: "Vijay Srinivasaraghavan (JIRA)" <jira@apache.org>
To: issues@flink.apache.org
Message-ID: <JIRA.12931404.1452849104000.61269.1461863292866@Atlassian.JIRA>
In-Reply-To: <JIRA.12931404.1452849104000@Atlassian.JIRA>
References: <JIRA.12931404.1452849104000@Atlassian.JIRA>
 <JIRA.12931404.1452849104357@arcas>
Subject: [jira] [Commented] (FLINK-3239) Support for Kerberos enabled Kafka
 0.9.0.0
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


    [ https://issues.apache.org/jira/browse/FLINK-3239?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15262538#comment-15262538 ] 

Vijay Srinivasaraghavan commented on FLINK-3239:
------------------------------------------------

Thanks [~stefanobaghino] 

I believe the kafka consumer principal and keytab infomation will be supplied in the JassConfig file for the Kafka client code to peform kerberos authentication and we need to pass only the JAAS config file property to the kafka clients (producer/consumer). 

I am trying to understand the need for passing the keytab configuration file location (public static final String KRB5_CONF_PATH = "krb5.conf.path") ? Could you please explain. 

KafkaClient {
    com.sun.security.auth.module.Krb5LoginModule required
    useKeyTab=true
    storeKey=true
    keyTab="/etc/security/keytabs/kafkaClient.keytab"
    principal="kafka-client@FOO.COM";
};

> Support for Kerberos enabled Kafka 0.9.0.0
> ------------------------------------------
>
>                 Key: FLINK-3239
>                 URL: https://issues.apache.org/jira/browse/FLINK-3239
>             Project: Flink
>          Issue Type: New Feature
>            Reporter: Niels Basjes
>            Assignee: Stefano Baghino
>         Attachments: flink3239-prototype.patch
>
>
> In Kafka 0.9.0.0 support for Kerberos has been created ( KAFKA-1686 ).
> Request: Allow Flink to forward/manage the Kerberos tickets for Kafka correctly so that we can use Kafka in a secured environment.
> I expect the needed changes to be similar to FLINK-2977 which implements the same support for HBase.


--
This message was sent by Atlassian JIRA
(v6.3.4#6332)