Authentication Techniques with Kafka Plugin

[Lawrence Weikum <lw...@pandora.com>]

Hello,

I'm setting up the ranger plugin with Kafka.  I know Ranger is used for authorization, but every time I test a policy, the audit log shows the user producing content is "ANONYMOUS".  Is there something I'm missing for authentication?  I know Kafka has settings for Kerberos, but our use case is hoping not to spin up a Kerberos instance.

Thanks!

Lawrence Weikum

Re: Authentication Techniques with Kafka Plugin

[Don Bosco Durai <bo...@apache.org>]

If you are not using Kerberos, then it would be ANONYMOUS, because without authentication Kafka broker cannot confirm who the real user is. In your case, you should be able to do IP based authorization.

Bosco


From:  Lawrence Weikum <lw...@pandora.com>
Reply-To:  <us...@ranger.incubator.apache.org>
Date:  Friday, May 13, 2016 at 2:28 PM
To:  "user@ranger.incubator.apache.org" <us...@ranger.incubator.apache.org>
Subject:  Authentication Techniques with Kafka Plugin

Hello,

I'm setting up the ranger plugin with Kafka.  I know Ranger is used for authorization, but every time I test a policy, the audit log shows the user producing content is "ANONYMOUS".  Is there something I'm missing for authentication?  I know Kafka has settings for Kerberos, but our use case is hoping not to spin up a Kerberos instance.

Thanks!

Lawrence Weikum