Does support the Kerberos based authentication?

linkedin / Burrow

Kafka Consumer Lag Checking

Apache License 2.0

3.76k stars 800 forks source link

Does support the Kerberos based authentication? #424

Open nellaivijay opened 6 years ago

nellaivijay commented 6 years ago

Does support the connectivity to kafka cluster if it kerberosized?

cluyihunter commented 6 years ago

yes, but the support is limited, at least based on my experience related to issue #333 try setting handshake-first=true under sasl and noverify=true for tls no such support for zookeeper servers though

jrevillard commented 6 years ago

I'm also interested in keytab authentication... any update please (brokers configured with SASL_SSL)?

peterolivo commented 5 years ago

I am bumping this issue as I am wondering the same thing as @jrevillard Can burrow connect to brokers config'd with SASL_SSL?

rja1 commented 5 years ago

Didn't ever see an update here. So, can Burrow auth using SASL_PLAINTEXT + Keytab ?

Thanks much!

jrevillard commented 5 years ago

As far as I know, no... but sarama (which is used by Burrow) does since version 1.2.3 (Add kerberos support (https://github.com/Shopify/sarama/pull/1366))

It seems that the options needs to be exposed : https://github.com/Shopify/sarama/pull/1366/files#diff-b4bda758a2aef091432646c354b4dc59R532

Apparently, this has to be done here: https://github.com/linkedin/Burrow/blob/334be9125dcb3d0b5cddbee3f69cb956419d5a9e/core/internal/helpers/sarama.go#L118

Best, Jerome