You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@druid.apache.org by GitBox <gi...@apache.org> on 2020/03/10 15:57:25 UTC
[GitHub] [druid] xrl opened a new issue #9495: Change Docker base to be
CentOS and also include kerberos tools
xrl opened a new issue #9495: Change Docker base to be CentOS and also include kerberos tools
URL: https://github.com/apache/druid/issues/9495
### Description
We are using Druid with a SASL (GSSAPI/Kerberos) Kafka cluster. In order to regenerate tokens we provide the jaas.conf with a script for running ktutil. The ktutil which comes in Debian does not allow us to feed in the password from the script but the CentOS ktutil does work.
### Motivation
It would be helpful to all Druid users talking to a kerberized kafka if docker image was all ready to go. I think Kafka is sufficiently common that it makes sense to provide this authentication tooling out of the box. This would also keep Druid users on the official docker image, so future bug fixes and security patches are easy to distribute with a docker tag update.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For additional commands, e-mail: commits-help@druid.apache.org
[GitHub] [druid] mkapoor17 commented on issue #9495: Switch Docker base to
CentOS and include kerberos tools
Posted by GitBox <gi...@apache.org>.
mkapoor17 commented on issue #9495: Switch Docker base to CentOS and include kerberos tools
URL: https://github.com/apache/druid/issues/9495#issuecomment-597191500
I too would advocate for this change. To utilize Kerberos and the kafka extension, I ended creating my own custom image that is now a lot different than the base image and went through a lot of headache trying to get ktutil to work - changing to CentOS did the trick.
I do want to go back to the official image but the significant differences between the OS distros and ktutil output makes it unlikely that I will.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For additional commands, e-mail: commits-help@druid.apache.org