question Re: Can Kafka handle the mixture of authentication methods? in Archives of Support Questions (Read Only)

Can Kafka handle the mixture of authentication methods?

dkozlowski — Mon, 15 May 2017 23:03:12 GMT

I would like to access a kafka topic from both users

a) a user accessing through LDAP with Kerberos ticket

b) a user accessing through LDPA without Kerberos ticket

So, let say we have a kafka topic created called: topicA.

UserA (defined as a)) produces a message into topicA. And userB (defined as b)) needs to be able to consume the message from topicA.

The same should be valid other way round.

Would that work?

Re: Can Kafka handle the mixture of authentication methods?

bhagan — Tue, 16 May 2017 01:29:48 GMT

My understanding is that once Kafka is configured for Kerberos, Kafka requires a ticket for both Producers and Consumers.

Re: Can Kafka handle the mixture of authentication methods?

dkozlowski — Tue, 16 May 2017 12:20:51 GMT

I have just got it answered - in HDP 2.3.x, 2.4.x and 2.5.x this scenario will not work. In the kerberized environment both users must have Kerberos ticket generated.

HDP 2.6, however, has an option that will allow users to authenticate with LDAP username/password.

Re: Can Kafka handle the mixture of authentication methods?

dkozlowski — Tue, 16 May 2017 12:22:39 GMT

Hi @bhagan,

Thanks for your comment. That was also my assumption but was looking for confirmation.