By default, the SASL username will be the primary part of the Kerberos principal. so the config should be "super.users=User:kafka"
On Tue, Feb 14, 2017 at 12:06 PM, Stephane Maarek < [email protected]> wrote: > (sorry many questions on security) > > I have a kafka cluster with 3 principals > kafka/[email protected] kafka/kafka-2.hostname.com@ > REALM.COM > kafka/[email protected] > I’m trying to enable ACL and I was reading on the confluent website that I > should setup my brokers to be superusers in order for them to be able to > read every topic (when replication happens). > I tried > > super.users=User:kafka/[email protected];User: > kafka/[email protected] <kafka/[email protected] > > > ;User:kafka/[email protected] > <kafka/[email protected]>; > > But it doesn’t seem to work? What’s expected for super.users ? >
