kafka-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Andras Beni (JIRA)" <j...@apache.org>
Subject [jira] [Created] (KAFKA-7630) Clarify that broker doesn't need scram username/password for delegation tokens
Date Thu, 15 Nov 2018 07:58:00 GMT
Andras Beni created KAFKA-7630:
----------------------------------

             Summary: Clarify that broker doesn't need scram username/password for delegation
tokens
                 Key: KAFKA-7630
                 URL: https://issues.apache.org/jira/browse/KAFKA-7630
             Project: Kafka
          Issue Type: Improvement
          Components: documentation, security
    Affects Versions: 2.0.0
            Reporter: Andras Beni


[Documentation|https://kafka.apache.org/documentation/#security_token_authentication] on delegation
tokens refers to SCRAM [configuration|https://kafka.apache.org/documentation/#security_sasl_scram_brokerconfig]
section. However, in a setup where only delegation tokens use SCRAM and all other authentication
goes via Kerberos, {{ScramLoginModule}} does not need {{username}} and {{password}}.

This is not obvious from the documentation.

I believe the same is true for setups where SCRAM is used by clients but inter broker communication
is GSSAPI or PLAIN, but have not tested it.

 



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message