confluentinc / confluent-kafka-dotnet

Confluent's Apache Kafka .NET client
https://github.com/confluentinc/confluent-kafka-dotnet/wiki
Apache License 2.0
53 stars 857 forks source link

Add Support for Negotiate authentication to CachedSchemaRegistryClient #1003

Open danielwagn3r opened 5 years ago

danielwagn3r commented 5 years ago

Description

We've a schema registry which is running in a kerberized environment and with the current schema registry client only basic authentication is supported.

Adding a feature like with Kafka it self (protocol SASL_SSL and mechanism GSSAPI) could solve the problem.

Another work would be #530 which already has been closed.

How to reproduce

Try to get CachedSchemaRegistryClient running with a kerberized https://github.com/hortonworks/registry.

Checklist

Please provide the following information:

mhowlett commented 5 years ago

current near term plans include adding support for SSL auth only.

danielwagn3r commented 5 years ago

Any ideas on Kerberos Negotiate, HortonWorks Schema Registry seems to be running often in a kerberized environment.

What about a possibility running the deserializer without a schema registry?