[NIFI-4820] Extend dynamic JAAS support for Kafka processors

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.4.0, 1.5.0, 1.6.0
• Fix Version/s: 1.10.0
• Component/s: Extensions
• Labels: kafka
• Assignee: Bryan Bende
• Reporter: Robert Batts
• Created: 26/Jan/18 15:45
• Updated: 15/Oct/19 18:08
• Resolved: 15/Oct/19 18:08

Description

NIFI-3528 added dynamic JAAS support, but was made specifically for Kerberos. Both SASL/SCRUM (KAFKA-3751), SASL/PLAINTEXT (KAFKA-2658 / KAFKA-3149), and any future Kafka SASL mechanism should have the ability to have a dynamic JAAS as well since they are implemented in Kafka. I would imagine this would come in the form of a Service for re-usability, but a less attractive option (in terms of Nifi security) may be to allow users to set sasl.jaas.config directly.

Issue Links

• links to: GitHub Pull Request #3813