Anonymitaet commented on a change in pull request #4771: Improve kerberos
documents
URL: https://github.com/apache/pulsar/pull/4771#discussion_r306104321
##########
File path: site2/docs/security-kerberos.md
##########
@@ -35,9 +37,13 @@ sudo /usr/sbin/kadmin.local -q "ktadd -k
/etc/security/keytabs/{broker-keytabnam
sudo /usr/sbin/kadmin.local -q 'addprinc -randkey client/{hostname}@{REALM}'
sudo /usr/sbin/kadmin.local -q "ktadd -k
/etc/security/keytabs/{client-keytabname}.keytab client/{hostname}@{REALM}"
```
+
Note that it is a *Kerberos* requirement that all your hosts can be resolved
with their FQDNs.
-#### Configure how to connect to KDC
+The first part of Broker principal (e.g. `broker` in
`broker/{hostname}@{REALM}`) is the `serverType` of each host,
+It can be value `broker` (host machine runs service Pulsar Broker) or `proxy`
(host machine runs service Pulsar Proxy).
Review comment:
What's the meaning of "It can be value"?
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
With regards,
Apache Git Services
