Thanks Ron. Makes sense. I'll pitch the idea of writing this KIP to my team.
On Mon, Sep 28, 2020 at 11:01 PM Ron Dagostino wrote:
> Hi Gokul. This would require a KIP to discuss. If you have a compelling
> need to change this then I encourage you to create a KIP and start the
> discussion.
Hi Gokul. This would require a KIP to discuss. If you have a compelling need
to change this then I encourage you to create a KIP and start the discussion.
I’m not aware of anything specific that would prevent the change, but I will
say that my gut instinct says it wouldn’t be a good idea
Thanks Ron.
Does this mean that it would be safe to remove the "KafkaPrincipal has not
changed after reauth" check in a future version? Or do you think there are
portions of the code that work under the assumption that this check exists?
On Sun, Sep 27, 2020 at 12:07 AM Ron Dagostino wrote:
>
Hi Gokul. I looked back at the discussion thread, and it appears it was an
arbitrary decision.
https://lists.apache.org/thread.html/45c09f226386c0b1dc5f9b36e112882a20414d5900f8d778969e633e%40%3Cdev.kafka.apache.org%3E
Ron
On Thu, Sep 24, 2020 at 11:03 AM Gokul Ramanan Subramanian <
Hi.
I was looking through Kafka code and found that SASL KafkaPrincipals are
not supposed to change upon reauthentication, and if they do, the broker
will kill the TCP connection.
What is the reasoning behind this limitation?
Thanks.
