kaushik srinivas created KAFKA-9933:
---------------------------------------
Summary: Need doc update on the AclAuthorizer when SASL_SSL is the
protocol used.
Key: KAFKA-9933
URL: https://issues.apache.org/jira/browse/KAFKA-9933
Project: Kafka
Issue Type: Improvement
Components: security
Affects Versions: 2.4.1
Reporter: kaushik srinivas
Hello,
Document on the usage of the authorizer does not speak about the principal
being used when the protocol for the listener is chosen as SASL + SSL
(SASL_SSL).
Suppose kerberos and ssl is enabled together, will the authorization be based
on the kerberos principal names or on the ssl certificate DN names ?
There is no document covering this part of the use case.
This needs information and documentation update.
Thanks,
Kaushik.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)