Uploaded image for project: 'Apache NiFi'
  1. Apache NiFi
  2. NIFI-4820

Extend dynamic JAAS support for Kafka processors

Attach filesAttach ScreenshotVotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 1.4.0, 1.5.0, 1.6.0
    • 1.10.0
    • Extensions

    Description

      NIFI-3528 added dynamic JAAS support, but was made specifically for Kerberos. Both SASL/SCRUM (KAFKA-3751), SASL/PLAINTEXT (KAFKA-2658 / KAFKA-3149), and any future Kafka SASL mechanism should have the ability to have a dynamic JAAS as well since they are implemented in Kafka. I would imagine this would come in the form of a Service for re-usability, but a less attractive option (in terms of Nifi security) may be to allow users to set sasl.jaas.config directly.

      Attachments

        Activity

          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            bbende Bryan Bende
            robatts Robert Batts
            Votes:
            2 Vote for this issue
            Watchers:
            7 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0h
                0h
                Logged:
                Time Spent - 0.5h
                0.5h

                Slack

                  Issue deployment