Group Authentication with Apache Kafka

["Tran, Bernard K [US] (SP)" <Be...@ngc.com>]

Hello,

Does Apache Kafka natively support authentication with a Kerberos Server/LDAP using Roles/Groups instead of having to manually add users to the ACL and provision principals for each user. If so, how would one be able to authenticate with groups/roles in Apache Kafka

Thanks,

Bernard Tran

Re: [EXTERNAL]Re: Group Authentication with Apache Kafka

["Rabey, Matthew" <ma...@linquest.com>]

It doesn’t natively support Groups and/or Role based ACLs though in the context of “natively” being the provided AclAuthorizer from Kafka.  To get Group/Role based ACL authorization, you have to either find a 3rd party authorizer already made by someone else (haven’t found one with my own searching) or create one yourself.  It “natively” provides you the interfaces to implement your own that can support Group/Role based ACL authorization.

Re: Group Authentication with Apache Kafka

[Sujay Bhowmick <su...@instaclustr.com>]

It does you can find the configuration in the documentation -
https://kafka.apache.org/documentation/#security_overview

On Thu, 1 Sept 2022 at 03:47, Tran, Bernard K [US] (SP) <
Bernard.Tran@ngc.com> wrote:

> Hello,
>
> Does Apache Kafka natively support authentication with a Kerberos
> Server/LDAP using Roles/Groups instead of having to manually add users to
> the ACL and provision principals for each user. If so, how would one be
> able to authenticate with groups/roles in Apache Kafka
>
> Thanks,
>
> Bernard Tran
>