Re: Making a Window services for kafka having sasl and ssl configuration

2018-04-03 Thread Martin Gainty
From: ashish chauhan Sent: Tuesday, April 3, 2018 4:16 AM To: users@kafka.apache.org Subject: Making a Window services for kafka having sasl and ssl configuration I am trying to make Window services for kafka having sasl and ssl configuration to keep it

Making a Window services for kafka having sasl and ssl configuration

2018-04-03 Thread ashish chauhan
I am trying to make Window services for kafka having sasl and ssl configuration to keep it always running when my machine starts. I am not sure how to set the following at run time for ssl authentication ,configuring and setting the jvm parameter before making the window services. set KAFKA_OPTS

Re: SASL and SSL

2017-05-26 Thread Waleed Fateem
Hi Kaufman, Thanks for the blog link. It definitely helped clear up a few things, but I was struggling to understand the behavior I was seeing where clients were still able to establish an SSL connection after SASL authentication even when trust store config was not set at the client side and ssl.

Re: SASL and SSL

2017-05-25 Thread Kaufman Ng
Ismael also wrote this security blog post about Kafka security. Hope you find it useful: https://www.confluent.io/blog/apache-kafka-security-authorization-authentication-encryption/ On Thu, May 25, 2017 at 12:04 AM, Waleed Fateem wrote: > For completion, I saw Ismael Juma post an answer which c

Re: SASL and SSL

2017-05-24 Thread Waleed Fateem
For completion, I saw Ismael Juma post an answer which contains the information I was looking for: http://comments.gmane.org/gmane.comp.apache.kafka.user/15140 SASL_SSL -> authentication using SASL AND connection is encrypted using SSL. On Wed, May 24, 2017 at 7:37 PM, Waleed Fateem wrote: > H

SASL and SSL

2017-05-24 Thread Waleed Fateem
Hello! I'm not very clear on the behavior that we should expect when we configure Kafka to use the protocol SASL_SSL. Is SASL or SSL mutually exclusive here or can I authenticate with SASL and use SSL for encryption? If the latter is true, then is it correct to assume that encryption will take p