Re: [DISCUSS] KIP-85: Dynamic JAAS configuration for Kafka clients
Hi, Rajini, Thanks for the proposal. It looks very useful. Jun On Mon, Oct 24, 2016 at 6:27 AM, Rajini Sivaram < rajinisiva...@googlemail.com> wrote: > If there are no more comments or suggestions, I will start voting process > for this KIP later this week. > > Please feel free to add any comments in the meantime. > > Thank you, > > Rajini > > On Fri, Oct 7, 2016 at 11:32 PM, Gwen Shapira wrote: > > > Huge +1. > > > > Thank you Rajini for all the hard work on security improvements. With > > more Docker deployments of micro-services, getting rid of mandatory > > config file will be super important. > > > > Gwen > > > > On Thu, Oct 6, 2016 at 5:43 AM, Edoardo Comar wrote: > > > Hi Rajini > > > great improvement and I see you had the code ready ... ! > > > > > > I now think it'd easier to implement a PR for KIP-83 (multiple logins > per > > > JVM) on top of yours, > > > as you have now identified a client property that can be used for > caching > > > logins. > > > > > > I'm actually wondering if I caused you to cut down your KIP&JIRA !! > > > > > > Also, I think your JIRA encompasses > > > https://issues.apache.org/jira/browse/KAFKA-3302 > > > > > > thanks, > > > Edo > > > -- > > > Edoardo Comar > > > IBM MessageHub > > > eco...@uk.ibm.com > > > IBM UK Ltd, Hursley Park, SO21 2JN > > > > > > IBM United Kingdom Limited Registered in England and Wales with number > > > 741598 Registered office: PO Box 41, North Harbour, Portsmouth, Hants. > > PO6 > > > 3AU > > > > > > > > > > > > From: Rajini Sivaram > > > To: dev@kafka.apache.org > > > Date: 06/10/2016 10:49 > > > Subject:[DISCUSS] KIP-85: Dynamic JAAS configuration for Kafka > > > clients > > > > > > > > > > > > Hi all, > > > > > > I have just created KIP-85 to enable JAAS login context for Kafka > clients > > > to be configured without a physical file: > > > > > > https://cwiki.apache.org/confluence/display/KAFKA/KIP- > > 85%3A+Dynamic+JAAS+configuration+for+Kafka+clients > > > > > > > > > > > > Comments and suggestions are welcome. > > > > > > Thank you... > > > > > > Regards, > > > > > > Rajini > > > > > > > > > > > > Unless stated otherwise above: > > > IBM United Kingdom Limited - Registered in England and Wales with > number > > > 741598. > > > Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 > > 3AU > > > > > > > > -- > > Gwen Shapira > > Product Manager | Confluent > > 650.450.2760 | @gwenshap > > Follow us: Twitter | blog > > > > > > -- > Regards, > > Rajini >
Re: [DISCUSS] KIP-85: Dynamic JAAS configuration for Kafka clients
If there are no more comments or suggestions, I will start voting process for this KIP later this week. Please feel free to add any comments in the meantime. Thank you, Rajini On Fri, Oct 7, 2016 at 11:32 PM, Gwen Shapira wrote: > Huge +1. > > Thank you Rajini for all the hard work on security improvements. With > more Docker deployments of micro-services, getting rid of mandatory > config file will be super important. > > Gwen > > On Thu, Oct 6, 2016 at 5:43 AM, Edoardo Comar wrote: > > Hi Rajini > > great improvement and I see you had the code ready ... ! > > > > I now think it'd easier to implement a PR for KIP-83 (multiple logins per > > JVM) on top of yours, > > as you have now identified a client property that can be used for caching > > logins. > > > > I'm actually wondering if I caused you to cut down your KIP&JIRA !! > > > > Also, I think your JIRA encompasses > > https://issues.apache.org/jira/browse/KAFKA-3302 > > > > thanks, > > Edo > > -- > > Edoardo Comar > > IBM MessageHub > > eco...@uk.ibm.com > > IBM UK Ltd, Hursley Park, SO21 2JN > > > > IBM United Kingdom Limited Registered in England and Wales with number > > 741598 Registered office: PO Box 41, North Harbour, Portsmouth, Hants. > PO6 > > 3AU > > > > > > > > From: Rajini Sivaram > > To: dev@kafka.apache.org > > Date: 06/10/2016 10:49 > > Subject:[DISCUSS] KIP-85: Dynamic JAAS configuration for Kafka > > clients > > > > > > > > Hi all, > > > > I have just created KIP-85 to enable JAAS login context for Kafka clients > > to be configured without a physical file: > > > > https://cwiki.apache.org/confluence/display/KAFKA/KIP- > 85%3A+Dynamic+JAAS+configuration+for+Kafka+clients > > > > > > > > Comments and suggestions are welcome. > > > > Thank you... > > > > Regards, > > > > Rajini > > > > > > > > Unless stated otherwise above: > > IBM United Kingdom Limited - Registered in England and Wales with number > > 741598. > > Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 > 3AU > > > > -- > Gwen Shapira > Product Manager | Confluent > 650.450.2760 | @gwenshap > Follow us: Twitter | blog > -- Regards, Rajini
Re: [DISCUSS] KIP-85: Dynamic JAAS configuration for Kafka clients
Huge +1. Thank you Rajini for all the hard work on security improvements. With more Docker deployments of micro-services, getting rid of mandatory config file will be super important. Gwen On Thu, Oct 6, 2016 at 5:43 AM, Edoardo Comar wrote: > Hi Rajini > great improvement and I see you had the code ready ... ! > > I now think it'd easier to implement a PR for KIP-83 (multiple logins per > JVM) on top of yours, > as you have now identified a client property that can be used for caching > logins. > > I'm actually wondering if I caused you to cut down your KIP&JIRA !! > > Also, I think your JIRA encompasses > https://issues.apache.org/jira/browse/KAFKA-3302 > > thanks, > Edo > -- > Edoardo Comar > IBM MessageHub > eco...@uk.ibm.com > IBM UK Ltd, Hursley Park, SO21 2JN > > IBM United Kingdom Limited Registered in England and Wales with number > 741598 Registered office: PO Box 41, North Harbour, Portsmouth, Hants. PO6 > 3AU > > > > From: Rajini Sivaram > To: dev@kafka.apache.org > Date: 06/10/2016 10:49 > Subject:[DISCUSS] KIP-85: Dynamic JAAS configuration for Kafka > clients > > > > Hi all, > > I have just created KIP-85 to enable JAAS login context for Kafka clients > to be configured without a physical file: > > https://cwiki.apache.org/confluence/display/KAFKA/KIP-85%3A+Dynamic+JAAS+configuration+for+Kafka+clients > > > > Comments and suggestions are welcome. > > Thank you... > > Regards, > > Rajini > > > > Unless stated otherwise above: > IBM United Kingdom Limited - Registered in England and Wales with number > 741598. > Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU -- Gwen Shapira Product Manager | Confluent 650.450.2760 | @gwenshap Follow us: Twitter | blog
Re: [DISCUSS] KIP-85: Dynamic JAAS configuration for Kafka clients
Hi Rajini great improvement and I see you had the code ready ... ! I now think it'd easier to implement a PR for KIP-83 (multiple logins per JVM) on top of yours, as you have now identified a client property that can be used for caching logins. I'm actually wondering if I caused you to cut down your KIP&JIRA !! Also, I think your JIRA encompasses https://issues.apache.org/jira/browse/KAFKA-3302 thanks, Edo -- Edoardo Comar IBM MessageHub eco...@uk.ibm.com IBM UK Ltd, Hursley Park, SO21 2JN IBM United Kingdom Limited Registered in England and Wales with number 741598 Registered office: PO Box 41, North Harbour, Portsmouth, Hants. PO6 3AU From: Rajini Sivaram To: dev@kafka.apache.org Date: 06/10/2016 10:49 Subject: [DISCUSS] KIP-85: Dynamic JAAS configuration for Kafka clients Hi all, I have just created KIP-85 to enable JAAS login context for Kafka clients to be configured without a physical file: https://cwiki.apache.org/confluence/display/KAFKA/KIP-85%3A+Dynamic+JAAS+configuration+for+Kafka+clients Comments and suggestions are welcome. Thank you... Regards, Rajini Unless stated otherwise above: IBM United Kingdom Limited - Registered in England and Wales with number 741598. Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU
[DISCUSS] KIP-85: Dynamic JAAS configuration for Kafka clients
Hi all, I have just created KIP-85 to enable JAAS login context for Kafka clients to be configured without a physical file: https://cwiki.apache.org/confluence/display/KAFKA/KIP-85%3A+Dynamic+JAAS+configuration+for+Kafka+clients Comments and suggestions are welcome. Thank you... Regards, Rajini
