[
https://issues.apache.org/jira/browse/KAFKA-7752?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16730322#comment-16730322
]
ASF GitHub Bot commented on KAFKA-7752:
---------------------------------------
asasvari commented on pull request #6072: KAFKA-7752
URL: https://github.com/apache/kafka/pull/6072
*More detailed description of your change,
if necessary. The PR title and PR message become
the squashed commit message, so use a separate
comment to ping reviewers.*
This commits sets ACL on /kafka-acl-extended
*Summary of testing strategy (including rationale)
for the feature or bug fix. Unit and/or integration
tests are expected for any behaviour change and
system tests should be considered for larger changes.*
- Extended ZkAuthorizationTest to check ACL on /kafka-acl-extended
- Using zookeeper-security-migration.sh tool on a Kerberized test cluster, I
verified the changes: secured and unsecured Kafka znodes and examined ACL on
/kafka-acl-extended with zookeeper client
### Committer Checklist (excluded from commit message)
- [ ] Verify design and implementation
- [ ] Verify test coverage and CI build status
- [ ] Verify documentation (including upgrade notes)
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org
> zookeeper-security-migration.sh does not remove ACL on kafka-acl-extended
> -------------------------------------------------------------------------
>
> Key: KAFKA-7752
> URL: https://issues.apache.org/jira/browse/KAFKA-7752
> Project: Kafka
> Issue Type: Bug
> Components: tools
> Affects Versions: 2.0.0
> Reporter: Attila Sasvari
> Assignee: Attila Sasvari
> Priority: Major
>
> Executed {{zookeeper-security-migration.sh --zookeeper.connect $(hostname
> -f):2181/kafka --zookeeper.acl secure}} to secure Kafka znodes and then
> {{zookeeper-security-migration.sh --zookeeper.connect $(hostname
> -f):2181/kafka --zookeeper.acl unsecure}} to unsecure those.
> I noticed that the tool did not remove ACLs on certain nodes:
> {code}
> ] getAcl /kafka/kafka-acl-extended
> 'world,'anyone
> : r
> 'sasl,'kafka
> : cdrwa
> {code}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
