You are viewing a plain text version of this content. The canonical link for it is here.
Posted to jira@kafka.apache.org by "Andras Beni (JIRA)" <ji...@apache.org> on 2018/11/15 07:59:00 UTC
[jira] [Commented] (KAFKA-7630) Clarify that broker doesn't need
scram username/password for delegation tokens
[ https://issues.apache.org/jira/browse/KAFKA-7630?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16687615#comment-16687615 ]
Andras Beni commented on KAFKA-7630:
------------------------------------
[~asasvari], [~viktorsomogyi] you might want to take a look at this.
> Clarify that broker doesn't need scram username/password for delegation tokens
> ------------------------------------------------------------------------------
>
> Key: KAFKA-7630
> URL: https://issues.apache.org/jira/browse/KAFKA-7630
> Project: Kafka
> Issue Type: Improvement
> Components: documentation, security
> Affects Versions: 2.0.0
> Reporter: Andras Beni
> Priority: Minor
>
> [Documentation|https://kafka.apache.org/documentation/#security_token_authentication] on delegation tokens refers to SCRAM [configuration|https://kafka.apache.org/documentation/#security_sasl_scram_brokerconfig] section. However, in a setup where only delegation tokens use SCRAM and all other authentication goes via Kerberos, {{ScramLoginModule}} does not need {{username}} and {{password}}.
> This is not obvious from the documentation.
> I believe the same is true for setups where SCRAM is used by clients but inter broker communication is GSSAPI or PLAIN, but have not tested it.
>
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)