Anonymitaet commented on a change in pull request #4771: Improve kerberos
documents
URL: https://github.com/apache/pulsar/pull/4771#discussion_r306109009
##########
File path: site2/docs/security-kerberos.md
##########
@@ -172,27 +196,35 @@ java -cp
-Djava.security.auth.login.config=/etc/pulsar/pulsar_jaas.conf -Djava.s
Make sure that the keytabs configured in the `pulsar_jaas.conf` file and kdc
server in the `krb5.conf` file are reachable by the operating system user who
is starting pulsar client.
-If you are using command line, you can continue with these step:
-1. Config your `client.conf`:
+#### 1.3.2. configure CLI tools
+
+If you are using command line tool (such as `bin/pulsar-client`,
`bin/pulsar-perf` and `bin/pulsar-admin`), you need 2 steps:
+
+Step 1. Config your `client.conf`:
```shell
authPlugin=org.apache.pulsar.client.impl.auth.AuthenticationSasl
authParams={"saslJaasClientSectionName":"PulsarClient", "serverType":"broker"}
```
-2. Set JVM parameter for JAAS configuration file and krb5 configuration file
with additional option.
+
+Step 2. Set JVM parameter for JAAS configuration file and krb5 configuration
file with additional option.
```shell
-Djava.security.auth.login.config=/etc/pulsar/pulsar_jaas.conf
-Djava.security.krb5.conf=/etc/pulsar/krb5.conf
```
-You can add this at the end of `PULSAR_EXTRA_OPTS` in the file
[`pulsar_tools_env.sh`](https://github.com/apache/pulsar/blob/master/conf/pulsar_tools_env.sh)
-## Kerberos configuration for working with Pulsar Proxy
+You can add this at the end of `PULSAR_EXTRA_OPTS` in the file
[`pulsar_tools_env.sh`](https://github.com/apache/pulsar/blob/master/conf/pulsar_tools_env.sh),
+Or you could add this line `OPTS="$OPTS
-Djava.security.auth.login.config=/etc/pulsar/pulsar_jaas.conf
-Djava.security.krb5.conf=/etc/pulsar/krb5.conf "` directly in to the CLI tools
script.
+
+The meaning of configurations are the same as in Java client section.
Review comment:
```suggestion
The meaning of configurations is the same as that in the Java client section.
```
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
With regards,
Apache Git Services
