Andras Beni created KAFKA-7630:
----------------------------------
Summary: Clarify that broker doesn't need scram username/password
for delegation tokens
Key: KAFKA-7630
URL: https://issues.apache.org/jira/browse/KAFKA-7630
Project: Kafka
Issue Type: Improvement
Components: documentation, security
Affects Versions: 2.0.0
Reporter: Andras Beni
[Documentation|https://kafka.apache.org/documentation/#security_token_authentication]
on delegation tokens refers to SCRAM
[configuration|https://kafka.apache.org/documentation/#security_sasl_scram_brokerconfig]
section. However, in a setup where only delegation tokens use SCRAM and all
other authentication goes via Kerberos, {{ScramLoginModule}} does not need
{{username}} and {{password}}.
This is not obvious from the documentation.
I believe the same is true for setups where SCRAM is used by clients but inter
broker communication is GSSAPI or PLAIN, but have not tested it.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
