TLS extract CN and lookup on LDAP for SASL

grepplabs / kafka-proxy

Proxy connections to Kafka cluster. Connect through SOCKS Proxy, HTTP Proxy or to cluster running in Kubernetes.

Apache License 2.0

488 stars 83 forks source link

TLS extract CN and lookup on LDAP for SASL #138

Open senadjukic opened 1 year ago

senadjukic commented 1 year ago

Can you guide whether this is possible today, and if yes, what configs should be used?

Client: wants to authenticate towards proxy with mTLS Proxy: terminates TLS, extracts CN from cert, performs a lookup in LDAP based on CN, use retrieved SASL_PLAIN towards broker Broker: support only SASL_PLAIN over TLS