Description
I want to support ZK to KRaft migration.
ZK stores a storedKey and a serverKey for each SCRAM credential not the saltedPassword.
The storedKey and serverKey are a crypto hash of some data with the saltedPassword and it is not possible to extract the saltedPassword from them.
The serverKey and storedKey are enough for SCRAM authentication and saltedPassword is not needed.
I will update the UserScramCredentialRecord to store serverKey and storedKey instead of saltedPassword and I will update that SCRAM is only supported with a bumped version of IBP_3_5 so that there are no compatibility issues.
Attachments
Issue Links
- is required by
-
KAFKA-14859 Support SCRAM ZK to KRaft Migration
-
- Resolved
-
- links to