Anonymitaet commented on a change in pull request #4771: Improve kerberos
documents
URL: https://github.com/apache/pulsar/pull/4771#discussion_r306106748
##########
File path: site2/docs/security-kerberos.md
##########
@@ -96,36 +102,54 @@ In the `pulsar_jaas.conf` file above
and the location of the keytab where the principal is stored. It allows
the broker to use the keytab specified in this section.
2. `PulsarClient` is a section name in the JASS file used by each client. This
section tells the client which principal to use inside Kerberos
and the location of the keytab where the principal is stored. It allows
the client to use the keytab specified in this section.
+ In the following example, this `PulsarClient` section will also be used in
the Pulsar internal admin configuration,
+ in cli command of `bin/pulsar-client`, `bin/pulsar-perf` and
`bin/pulsar-admin`. You can also add different section for different use case.
-It is also a choice to have 2 separate JAAS configuration files: the file for
broker will only have `PulsarBroker` section; while the one for client only
have `PulsarClient` section.
+It is also a choice to have 2 separate JAAS configuration files: the file for
broker will have both section; while the one for client only have
`PulsarClient` section.
Review comment:
```suggestion
You can have two separate JAAS configuration files:
* The file for a broker has both `PulsarBroker` and `PulsarClient` sections
* The file for a client only has `PulsarClient` section
```
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
With regards,
Apache Git Services
