Re: SSL authorization mechanizm

2016-04-01 Thread Kalpesh Jadhav
Hi Team, Is there any java api available to give access to topic. As we are creating topic dynamically, need to give write access, to send messages. Just wanted to run below command through java api. bin/kafka-acls.sh --add --allow-principals user:ctadmin --operation ALL --topic marchTesting

SSL authorization mechanizm

2015-11-02 Thread Lukasz.Debowczyk
Hi, My company is currently looking at Kafka as message broker. One of key aspects is security. I'm currently looking at authentication/authorization mechanisms in Kafka 0.9.0.0-SNAPSHOT. We have decided that SSL based authentication/authorization will be sufficient for us at the begging. We

Re: SSL authorization mechanizm

2015-11-02 Thread Jun Rao
Yes, by default, we take the full ssl certificate attributes as the user name. This may not be suitable for ACL. We do allow the ssl user name to be customized through PrincipalBuilder. You can define a customized PrincipalBuilder and pass that in through "principal.builder.class". The customized