Java连接Kafka Kerberos
平台:Ambari hdp 2.6.2.0
开启keberos
1.配置kafka_client_jaas.conf
注意keyTab和principal两个配置项
KafkaServer {
com.sun.security.auth.module.Krb5LoginModule required
useKeyTab=true
keyTab="/etc/security/keytabs/kafka.service.keytab"
storeKey=true
useTicketCache=false
principal="kafka/yamb2@EXAMPLE.COM";
};
KafkaClient {
com.sun.security.auth.module.Krb5LoginModule required
useKeyTab=true
keyTab="/etc/security/keytabs/kafka.service.keytab"
storeKey=true
useTicketCache=false
principal="kafka/yamb2@EXAMPLE.COM";
};
Client {
com.sun.security.auth.module.Krb5LoginModule required
useKeyTab=true
storeKey=true
useTicketCache=false
keyTab="/etc/security/keytabs/kafka.service.keytab"
principal="kafka/yamb2@EXAMPLE.COM";
};
2.kafka Producer Java Demo
在kafka中创建一个topic:cw_test2019042301
kafka_client_jaas.conf为上一步配置的
krb5.conf为集群上的配置文件。默认目录为/etc/krb5.con