Anonymitaet commented on a change in pull request #4771: Improve kerberos
documents
URL: https://github.com/apache/pulsar/pull/4771#discussion_r308229951
##########
File path: site2/website/versioned_docs/version-2.4.0/security-kerberos.md
##########
@@ -173,19 +196,28 @@ java -cp
-Djava.security.auth.login.config=/etc/pulsar/pulsar_jaas.conf -Djava.s
Make sure that the keytabs configured in the `pulsar_jaas.conf` file and kdc
server in the `krb5.conf` file are reachable by the operating system user who
is starting pulsar client.
-If you are using command line, you can continue with these step:
-1. Config your `client.conf`:
+#### configure CLI tools
+
+If you are using a command-line tool (such as `bin/pulsar-client`,
`bin/pulsar-perf` and `bin/pulsar-admin`), you need to preform the following
steps:
+
+Step 1. Config your `client.conf`.
```shell
authPlugin=org.apache.pulsar.client.impl.auth.AuthenticationSasl
authParams={"saslJaasClientSectionName":"PulsarClient", "serverType":"broker"}
```
-2. Set JVM parameter for JAAS configuration file and krb5 configuration file
with additional option.
+
+
+Step 2. Set JVM parameters for JAAS configuration file and krb5 configuration
file with additional options.
```shell
-Djava.security.auth.login.config=/etc/pulsar/pulsar_jaas.conf
-Djava.security.krb5.conf=/etc/pulsar/krb5.conf
```
-You can add this at the end of `PULSAR_EXTRA_OPTS` in the file
[`pulsar_tools_env.sh`](https://github.com/apache/pulsar/blob/master/conf/pulsar_tools_env.sh)
-## Kerberos configuration for working with Pulsar Proxy
+You can add this at the end of `PULSAR_EXTRA_OPTS` in the file
[`pulsar_tools_env.sh`](https://github.com/apache/pulsar/blob/master/conf/pulsar_tools_env.sh),
+Or add this line `OPTS="$OPTS
-Djava.security.auth.login.config=/etc/pulsar/pulsar_jaas.conf
-Djava.security.krb5.conf=/etc/pulsar/krb5.conf "` directly in to the CLI tool
script.
Review comment:
```suggestion
or add this line `OPTS="$OPTS
-Djava.security.auth.login.config=/etc/pulsar/pulsar_jaas.conf
-Djava.security.krb5.conf=/etc/pulsar/krb5.conf "` directly to the CLI tool
script.
```
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
With regards,
Apache Git Services
