Can principal be groups for SASL Kerberos?

[Stephane Maarek <st...@simplemachines.com.au>]

Hi,

Is it possible to assign Kerberos users to groups and then set ACL for
these groups ?
The problem is that it’s painful to add every user’s ACL when their
principal is created, so we’re thinking of creating a “public” and a
“confidential” group. Topics would be assigned to either and then if the
user is assigned to a group in Kerberos it’s automatically authorized.

I’ve seen User:bob but I have no idea if Group:public exists or how to
configure it?

Has it already been done?

Thanks!
Stephane

Re: Can principal be groups for SASL Kerberos?

[Manikumar <ma...@gmail.com>]

Currently, group support is not available.  Related JIRA:
https://issues.apache.org/jira/browse/KAFKA-2794
I try to complete the PR submitted by Parth.

On Tue, Feb 14, 2017 at 10:09 AM, Stephane Maarek <
stephane@simplemachines.com.au> wrote:

> Hi,
>
> Is it possible to assign Kerberos users to groups and then set ACL for
> these groups ?
> The problem is that it’s painful to add every user’s ACL when their
> principal is created, so we’re thinking of creating a “public” and a
> “confidential” group. Topics would be assigned to either and then if the
> user is assigned to a group in Kerberos it’s automatically authorized.
>
> I’ve seen User:bob but I have no idea if Group:public exists or how to
> configure it?
>
> Has it already been done?
>
> Thanks!
> Stephane
>