[jira] [Commented] (KAFKA-4943) SCRAM secret's should be better protected with Zookeeper ACLs

2017-04-07 Thread Ismael Juma (JIRA)
[ https://issues.apache.org/jira/browse/KAFKA-4943?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15961437#comment-15961437 ] Ismael Juma commented on KAFKA-4943: [~jstrom], can you please file a separate issue about the logging

[jira] [Commented] (KAFKA-4943) SCRAM secret's should be better protected with Zookeeper ACLs

2017-04-07 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/KAFKA-4943?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15961205#comment-15961205 ] ASF GitHub Bot commented on KAFKA-4943: --- Github user asfgit closed the pull request at:

[jira] [Commented] (KAFKA-4943) SCRAM secret's should be better protected with Zookeeper ACLs

2017-04-05 Thread JIRA
[ https://issues.apache.org/jira/browse/KAFKA-4943?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15956945#comment-15956945 ] Johan Ström commented on KAFKA-4943: Another possibly bad thing is that Kafka logs the credentials in

[jira] [Commented] (KAFKA-4943) SCRAM secret's should be better protected with Zookeeper ACLs

2017-03-24 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/KAFKA-4943?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15940828#comment-15940828 ] ASF GitHub Bot commented on KAFKA-4943: --- GitHub user rajinisivaram opened a pull request:

[jira] [Commented] (KAFKA-4943) SCRAM secret's should be better protected with Zookeeper ACLs

2017-03-24 Thread JIRA
[ https://issues.apache.org/jira/browse/KAFKA-4943?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15940281#comment-15940281 ] Johan Ström commented on KAFKA-4943: Great! > SCRAM secret's should be better protected with

[jira] [Commented] (KAFKA-4943) SCRAM secret's should be better protected with Zookeeper ACLs

2017-03-24 Thread Rajini Sivaram (JIRA)
[ https://issues.apache.org/jira/browse/KAFKA-4943?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15940275#comment-15940275 ] Rajini Sivaram commented on KAFKA-4943: --- [~jstrom] [~stephane.maa...@gmail.com] Will submit a PR to

[jira] [Commented] (KAFKA-4943) SCRAM secret's should be better protected with Zookeeper ACLs

2017-03-24 Thread Stephane Maarek (JIRA)
[ https://issues.apache.org/jira/browse/KAFKA-4943?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15939916#comment-15939916 ] Stephane Maarek commented on KAFKA-4943: [~rsivaram] if Zookeeper has only cdrwa by the kafka

[jira] [Commented] (KAFKA-4943) SCRAM secret's should be better protected with Zookeeper ACLs

2017-03-24 Thread JIRA
[ https://issues.apache.org/jira/browse/KAFKA-4943?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15939888#comment-15939888 ] Johan Ström commented on KAFKA-4943: I agree, it won't be totally secure unless Zk is totally secure,

[jira] [Commented] (KAFKA-4943) SCRAM secret's should be better protected with Zookeeper ACLs

2017-03-23 Thread Rajini Sivaram (JIRA)
[ https://issues.apache.org/jira/browse/KAFKA-4943?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15938726#comment-15938726 ] Rajini Sivaram commented on KAFKA-4943: --- The current SCRAM implementation uses the default ACL

[jira] [Commented] (KAFKA-4943) SCRAM secret's should be better protected with Zookeeper ACLs

2017-03-23 Thread Ismael Juma (JIRA)
[ https://issues.apache.org/jira/browse/KAFKA-4943?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15938060#comment-15938060 ] Ismael Juma commented on KAFKA-4943: cc [~rsivaram] > SCRAM secret's should be better protected with

[jira] [Commented] (KAFKA-4943) SCRAM secret's should be better protected with Zookeeper ACLs

2017-03-23 Thread JIRA
[ https://issues.apache.org/jira/browse/KAFKA-4943?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15937993#comment-15937993 ] Johan Ström commented on KAFKA-4943: Seems the no-acl-set-at-all was fixed in