[AMBARI-22485] Allow Ambari to support non-kerberos SASL mechanisms for Kafka

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.6.0
• Fix Version/s: 2.6.1
• Component/s: stacks
• Assignee: Yolanda M. Davis
• Reporter: Yolanda M. Davis
• Created: 20/Nov/17 16:29
• Updated: 23/Jan/18 21:11
• Resolved: 23/Jan/18 21:11

Description

Currently AMBARI support's SASL and SSL as the security options for Kafka.
Within SASL Ambari only supports GSSAPI(kerberos) only. Kafka supports other mechanisms such as plain, md5 etc.. This allows users to plug in their LDAP system into Kafka.
Also another important option is SASL_SSL.
We need to expose necessary configs in Ambari to enable these mechanisms for users.

Ambari should allow users to not only configure Kafka for non-kerberos based SASL mechanisms, but also ensure that jaas configuration files are written when these options are provided (as opposed to only writing those files when kerberos has been enabled)..

Issue Links

• links to: ReviewBoard