[
https://issues.apache.org/jira/browse/FLINK-3239?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15263664#comment-15263664
]
Stefano Baghino commented on FLINK-3239:
----------------------------------------
Beware that in my prototype the {{krb.conf.path}} does not point to the keytab
configuration file location but to the Kerberos configuration file (the one
that holds information about the realm(s) and so on). In a final solution that
could of course be optional as there is a series of default location where that
file can be looked up.
Regarding the keytab configuration file, in my experiments I found it was
needed at all levels (job, JobManager, TaskManager and connector) for the job
to be compiled to Flink's DAG representation and then executed. I'm not really
sure of why is it, to be fair.
Of course I may be wrong, so feel free to experiment yourself with my code.
> Support for Kerberos enabled Kafka 0.9.0.0
> ------------------------------------------
>
> Key: FLINK-3239
> URL: https://issues.apache.org/jira/browse/FLINK-3239
> Project: Flink
> Issue Type: New Feature
> Reporter: Niels Basjes
> Assignee: Stefano Baghino
> Attachments: flink3239-prototype.patch
>
>
> In Kafka 0.9.0.0 support for Kerberos has been created ( KAFKA-1686 ).
> Request: Allow Flink to forward/manage the Kerberos tickets for Kafka
> correctly so that we can use Kafka in a secured environment.
> I expect the needed changes to be similar to FLINK-2977 which implements the
> same support for HBase.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
