Wouldn't the kafka jaas.conf and keytab be already present on the nodes if managing the kafka deployment through the distro?
Thanks On Thu, Jul 6, 2017 at 6:05 PM, Thomas Weise <t...@apache.org> wrote: > Hi, > > Has anyone run the Apex Kafka consumer or producer with security enabled? > > I got authentication working in embedded mode and looking to deploy to the > cluster. It will require > > * keytab > * JAAS config with the KafkaClient settings. > * JVM option -Djava.security.auth.login.config=./kafka_client_jaas.conf > * config properties: > > <property> > <name>apex.operator.kafkaOutput.prop.properties( > security.protocol)</name> > <value>SASL_SSL</value> > </property> > > <property> > <name>apex.operator.kafkaOutput.prop.properties(sa > sl.kerberos.service.name)</name> > <value>kafka</value> > </property> > > I guess the JAAS conf and keytab can be pushed with the FILES argument. > Any other ideas how to set this up? > > Thanks, > Thomas > >