[
https://issues.apache.org/jira/browse/AMBARI-22718?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16322148#comment-16322148
]
ASF GitHub Bot commented on AMBARI-22718:
-----------------------------------------
adoroszlai opened a new pull request #88: [AMBARI-22718] Allow
security.inter.broker.protocol: SASL_SSL for all stack versions
URL: https://github.com/apache/ambari/pull/88
## What changes were proposed in this pull request?
This change removes the minimum stack version requirement for `SASL_SSL` in
Kafka.
8fce2a1741 added support for `security.inter.broker.protocol: SASL_SSL` in
Ambari, but only for stacks with the `KAFKA_EXTENDED_SASL_SUPPORT` flag. It
turned out that the flag is for other SASL features (eg. SASL/SCRAM, etc.), and
Kafka supports `SASL_SSL` in earlier versions, too.
This eliminates the need to manually tweak `stack_features.json`.
## How was this patch tested?
Installed kerberized HDP 2.4, 2.5 and 2.6 clusters via blueprints. Verified
that Kafka Brokers in all of these versions work fine with
`security.inter.broker.protocol: SASL_SSL`.
Existing unit tests pass:
```
Total run:1201
Total errors:0
Total failures:0
OK
```
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
> Cannot set security.inter.broker.protocol: SASL_SSL via Blueprint with
> Kerberos
> -------------------------------------------------------------------------------
>
> Key: AMBARI-22718
> URL: https://issues.apache.org/jira/browse/AMBARI-22718
> Project: Ambari
> Issue Type: Bug
> Components: stacks
> Affects Versions: 2.6.1
> Reporter: Doroszlai, Attila
> Assignee: Doroszlai, Attila
> Fix For: 3.0.0, 2.6.2
>
> Attachments: AMBARI-22718.branch-2.6.patch, AMBARI-22718.trunk.patch
>
>
> STR:
> # Install Ambari 2.6.1
> # Tweak {{stack_features.json}} to lower {{min_version}} for
> {{kafka_extended_sasl_support}}
> # Create secure cluster via blueprint (ZooKeeper + Kafka) with
> {{security.inter.broker.protocol: SASL_SSL}}
> Result: Kafka Brokers stopped due to missing {{kafka_jaas.conf}}
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
