[KAFKA-1696] Kafka should be able to generate Hadoop delegation tokens

• Type: New Feature
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: security
• Assignee: Parth Brahmbhatt
• Reporter: Jay Kreps
• Created: 09/Oct/14 20:35
• Updated: 02/Aug/18 19:59

Description

For access from MapReduce/etc jobs run on behalf of a user.

Issue Links

• depends upon: KAFKA-1686 Implement SASL/Kerberos
• depends upon: KAFKA-1695 Authenticate connection to Zookeeper
• is related to: FLINK-3239 Support for Kerberos enabled Kafka 0.9.0.0
• mentioned in: Page Loading...
• mentioned in: Page Loading...
• mentioned in: Page Loading...

Sub-Tasks

• Add capability to create delegation token: Resolved
• Add authentication based on delegation token.: Resolved
• Add capability to renew/expire delegation tokens.: Resolved
• Add system tests for delegation token based authentication: Resolved
• Add Delegation Token Operations to KafkaAdminClient: Resolved
• Add documentation for delegation token authentication mechanism: Resolved
• Add support to allow users to acquire delegation tokens for other users: Resolved
• Support ZooKeeper based master/secret key management for delegation tokens: In Progress