Uploaded image for project: 'Kafka'
  1. Kafka
  2. KAFKA-5801

Use hadoop.security.auth_to_local if available

    XMLWordPrintableJSON

    Details

      Description

      As discussed in comments for KAFKA-5764, would be great if Kafka would optionally use `hadoop.security.auth_to_local` whenever available and fallback to `sasl.kerberos.principal.to.local.rules` if `hadoop.security.auth_to_local` isn't set / isn't available.

      We have so many components use `hadoop.security.auth_to_local` - including hdfs, yarn, hive, spark, impala and it seems that we would need to duplicate `auth_to_local` rules into Kafka config. We have a lot of rules in `hadoop.security.auth_to_local` so it would be much easier to maintain if it's in one place.

        Attachments

          Issue Links

          is blocked by

          Improvement - An improvement or enhancement to an existing feature or task. KAFKA-5764 KafkaShortnamer should allow for case-insensitive matches

          • Major - Major loss of function.
          • Resolved

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                Tagar Ruslan Dautkhanov
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated: