Wouldn't the kafka jaas.conf and keytab be already present on the nodes if
managing the kafka deployment through the distro?

Thanks

On Thu, Jul 6, 2017 at 6:05 PM, Thomas Weise <t...@apache.org> wrote:

> Hi,
>
> Has anyone run the Apex Kafka consumer or producer with security enabled?
>
> I got authentication working in embedded mode and looking to deploy to the
> cluster. It will require
>
> * keytab
> * JAAS config with the KafkaClient settings.
> * JVM option  -Djava.security.auth.login.config=./kafka_client_jaas.conf
> * config properties:
>
>   <property>
>     <name>apex.operator.kafkaOutput.prop.properties(
> security.protocol)</name>
>     <value>SASL_SSL</value>
>   </property>
>
>   <property>
>     <name>apex.operator.kafkaOutput.prop.properties(sa
> sl.kerberos.service.name)</name>
>     <value>kafka</value>
>   </property>
>
> I guess the JAAS conf and keytab can be pushed with the FILES argument.
> Any other ideas how to set this up?
>
> Thanks,
> Thomas
>
>

Reply via email to