ah- / rdkafka-dotnet

C# Apache Kafka client
Other
242 stars 73 forks source link

Is it possible to use SASL GSSAPI on Windows without using Active Directory? #130

Closed nouzun closed 7 years ago

nouzun commented 7 years ago

I want to use SASL GSSAPI on Windows without Active Directory but I can not set keytab file because "sasl.kerberos.keytab" configuration is not available if you compile rdkafka on Windows. Is there a way to use SASL GSSAPI on Windows without Active Directory?

You can see it in rdkafka_conf.c:

#ifndef _MSC_VER
    { _RK_GLOBAL, "sasl.kerberos.kinit.cmd", _RK_C_STR,
      _RK(sasl.kinit_cmd),
      "Full kerberos kinit command string, %{config.prop.name} is replaced "
      "by corresponding config object value, %{broker.name} returns the "
      "broker's hostname.",
      .sdef = "kinit -S \"%{sasl.kerberos.service.name}/%{broker.name}\" "
      "-k -t \"%{sasl.kerberos.keytab}\" %{sasl.kerberos.principal}" },
    { _RK_GLOBAL, "sasl.kerberos.keytab", _RK_C_STR,
      _RK(sasl.keytab),
      "Path to Kerberos keytab file. Uses system default if not set."
      "**NOTE**: This is not automatically used but must be added to the "
      "template in sasl.kerberos.kinit.cmd as "
      "` ... -t %{sasl.kerberos.keytab}`." },
    { _RK_GLOBAL, "sasl.kerberos.min.time.before.relogin", _RK_C_INT,
      _RK(sasl.relogin_min_time),
      "Minimum time in milliseconds between key refresh attempts.",
      1, 86400*1000, 60*1000 },
#endif