kafka-jira mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Manikumar (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (KAFKA-5750) Elevate log messages for denials to INFO in SimpleAclAuthorizer class
Date Thu, 14 Sep 2017 14:03:00 GMT

     [ https://issues.apache.org/jira/browse/KAFKA-5750?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Manikumar updated KAFKA-5750:
-----------------------------
    Summary: Elevate log messages for denials to INFO in SimpleAclAuthorizer class  (was:
Elevate log messages for denials to WARN in SimpleAclAuthorizer class)

> Elevate log messages for denials to INFO in SimpleAclAuthorizer class
> ---------------------------------------------------------------------
>
>                 Key: KAFKA-5750
>                 URL: https://issues.apache.org/jira/browse/KAFKA-5750
>             Project: Kafka
>          Issue Type: Improvement
>          Components: security
>            Reporter: Phillip Walker
>            Assignee: Manikumar
>             Fix For: 1.0.0
>
>
> Currently, the authorizer logs all messages at DEBUG level and logs every single authorization
attempt, which can greatly decrease cluster performance, especially when Mirrormaker also
produces to that cluster. Many InfoSec requirements, though, require that authorization denials
be logged. The proposed solution is to elevate any denial in SimpleAclAuthorizer and any other
relevant class to WARN while leaving approvals at their currently logging levels.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message