>
> > >> > On Wed, Dec 14, 2016 at 3:53 PM, Shrikant Patel
> > >> wrote:
> > >> >
> > >> > > You need to execute kafka-acls.sh with --consumer to enable
> > >> consumption
> > >> > > from ka
Raghu,
Only the principal used for inter broker communication needs to be a super
user. For other users, you can set ACLs based on their role. You will need
different keystores for broker and clients with different principals so
that you can configure different permissions. You can configure User:
Thanks Rajani for the above Info but I want to restrict a user from
performing all the operations (I think that defines ACL), I just want
User_1 to produce messages and User_2 to consume messages.
How can we achieve that.
Thanks in advance
On Mon, Dec 19, 2016 at 3:13 AM, Rajini Sivaram
wrote:
Raghu,
It could be because the principal used for inter broker communication
doesn't have all the necessary permissions. If you are using PLAINTEXT for
inter-broker, the principal is ANONYMOUS, if using SSL, it would be similar
to the one you are setting for client. You can configure broker princi
Thank you Rajani, your suggestion is really helpful.
[2016-12-16 21:55:36,720] DEBUG Principal =
User:CN=writeuser,OU=Unknown,O=Unknown,L=Unknown,ST=Unknown,C=Unknown is
Allowed Operation = Create from host = 172.28.89.63 on resource =
Cluster:kafka-cluster (kafka.authorizer.logger)
Finally I am
You need to set ssl.client.auth="required" in server.properties.
Regards,
Rajini
On Wed, Dec 14, 2016 at 12:12 AM, Raghu B wrote:
> Hi All,
>
> I am trying to enable ACL's in my Kafka cluster with along with SSL
> Protocol.
>
> I tried with each and every parameters but no luck, so I need help
gt; > > >>
> > > >>
> > > >> On Wed, Dec 14, 2016 at 3:57 PM, Raghu B
> > wrote:
> > > >>
> > > >> > Thanks Shrikant for your reply, but I did consumer part also and
> > more
> > > >
facing this issue only with consumer, I am getting this
> > errors
> > >> > with producer as well as consumer
> > >> >
> > >> > On Wed, Dec 14, 2016 at 3:53 PM, Shrikant Patel
> > >> wrote:
> > >> >
> > >> > >
r
> >> >
> >> > On Wed, Dec 14, 2016 at 3:53 PM, Shrikant Patel
> >> wrote:
> >> >
> >> > > You need to execute kafka-acls.sh with --consumer to enable
> >> consumption
> >> > > from kafka.
> >> > &
> with producer as well as consumer
> >> >
> >> > On Wed, Dec 14, 2016 at 3:53 PM, Shrikant Patel
> >> wrote:
> >> >
> >> > > You need to execute kafka-acls.sh with --consumer to enable
> >> consumption
> >> > >
;> > > _
>> > > Shrikant Patel | 817.367.4302
>> > > Enterprise Architecture Team
>> > > PDX-NHIN
>> > >
>> > > -Original Message-
>> > > From: Raghu B [mailto:
> > > Shrikant Patel | 817.367.4302
> > > Enterprise Architecture Team
> > > PDX-NHIN
> > >
> > > -Original Message-
> > > From: Raghu B [mailto:raghu98...@gmail.com]
> > > Sent: Wednesday, December 14, 2016 5:42 PM
> &
sday, December 14, 2016 5:42 PM
> > To: secur...@kafka.apache.org
> > Subject: Kafka ACL's with SSL Protocol is not working
> >
> > Hi All,
> >
> > I am trying to enable ACL's in my Kafka cluster with along with SSL
> > Protocol.
>
mber 14, 2016 5:42 PM
> To: secur...@kafka.apache.org
> Subject: Kafka ACL's with SSL Protocol is not working
>
> Hi All,
>
> I am trying to enable ACL's in my Kafka cluster with along with SSL
> Protocol.
>
> I tried with each and every parameters but no luck, so I need
, December 14, 2016 5:42 PM
To: secur...@kafka.apache.org
Subject: Kafka ACL's with SSL Protocol is not working
Hi All,
I am trying to enable ACL's in my Kafka cluster with along with SSL Protocol.
I tried with each and every parameters but no luck, so I need help to enable
the SSL(withou
Hi All,
I am trying to enable ACL's in my Kafka cluster with along with SSL
Protocol.
I tried with each and every parameters but no luck, so I need help to
enable the SSL(without Kerberos) and I am attaching all the configuration
details in this.
Kindly Help me.
*I tested SSL without ACL, it w
Hi All,
I am trying to enable ACL's in my Kafka cluster with along with SSL
Protocol.
I tried with each and every parameters but no luck, so I need help to
enable the SSL(without Kerberos) and I am attaching all the configuration
details in this.
Kindly Help me.
*I tested SSL without ACL, it w
17 matches
Mail list logo