question Re: Kafka ACL authorizer for Active Directory in Archives of Support Questions (Read Only)

Kafka ACL authorizer for Active Directory

RichardK1967 — Fri, 16 Sep 2022 12:08:17 GMT

I'm using Cloudera enterprise and Kafka 0.10.x.

To secure Kafka I've enabled Kerberos and configured Kafka to use the SimpleACLAuthorizer which stores ACLs in ZooKeeper. Instead of using this I'd like to check Active Directory instead to determine topic authorization. I can't seem to find an implementation. Does one exist?

Re: Kafka ACL authorizer for Active Directory

pdvorak — Fri, 08 Sep 2017 15:51:55 GMT

Your best bet would to use sentry to provide the authorization with kerberos and AD. You can use sssd on the linux nodes to make the AD users and groups available to kafka:

https://www.cloudera.com/documentation/enterprise/latest/topics/sg_auth_overview.html

https://www.cloudera.com/documentation/kafka/latest/topics/kafka_security.html

-pd