Re: Support customized security protocol

2016-01-21 Thread tao xiao
Thank you. On Fri, 22 Jan 2016 at 08:39 Guozhang Wang wrote: > Done. > > On Thu, Jan 21, 2016 at 12:38 AM, tao xiao wrote: > > > Hi Guozhang, > > > > Thanks for that. > > > > Can you please grant kevinth the write access too? He is my colleague and > > both of us work on this topic now. > > > >

Re: Support customized security protocol

2016-01-21 Thread Guozhang Wang
Done. On Thu, Jan 21, 2016 at 12:38 AM, tao xiao wrote: > Hi Guozhang, > > Thanks for that. > > Can you please grant kevinth the write access too? He is my colleague and > both of us work on this topic now. > > On Wed, 20 Jan 2016 at 14:55 Guozhang Wang wrote: > > > Tao, > > > > I have granted

Re: Support customized security protocol

2016-01-21 Thread tao xiao
Hi Guozhang, Thanks for that. Can you please grant kevinth the write access too? He is my colleague and both of us work on this topic now. On Wed, 20 Jan 2016 at 14:55 Guozhang Wang wrote: > Tao, > > I have granted you the access. > > Guozhang > > > On Tue, Jan 19, 2016 at 7:56 PM, Connie Yang

Re: Support customized security protocol

2016-01-20 Thread Ismael Juma
Hi Connie, On Wed, Jan 20, 2016 at 3:56 AM, Connie Yang wrote: > @Ismael, what's the status of the SASL/PLAIN PR, > https://github.com/apache/kafka/pull/341? Rajini said he would create a KIP for it: https://issues.apache.org/jira/browse/KAFKA-2658?focusedCommentId=14987903&page=com.atlassian

Re: Support customized security protocol

2016-01-20 Thread Ismael Juma
Hi Tao, On Wed, Jan 20, 2016 at 2:25 AM, tao xiao wrote: > The PR provides a new SASL mech but it doesn't provide a pluggable way to > implement user's own logic to do authentication. So I don't think the PR > will meet my need. > Yes, as I said, that would not be enough for your use-case. But

Re: Support customized security protocol

2016-01-19 Thread Guozhang Wang
Tao, I have granted you the access. Guozhang On Tue, Jan 19, 2016 at 7:56 PM, Connie Yang wrote: > @Ismael, what's the status of the SASL/PLAIN PR, > https://github.com/apache/kafka/pull/341? > > > > On Tue, Jan 19, 2016 at 6:25 PM, tao xiao wrote: > > > The PR provides a new SASL mech but i

Re: Support customized security protocol

2016-01-19 Thread Connie Yang
@Ismael, what's the status of the SASL/PLAIN PR, https://github.com/apache/kafka/pull/341? On Tue, Jan 19, 2016 at 6:25 PM, tao xiao wrote: > The PR provides a new SASL mech but it doesn't provide a pluggable way to > implement user's own logic to do authentication. So I don't think the PR > w

Re: Support customized security protocol

2016-01-19 Thread tao xiao
The PR provides a new SASL mech but it doesn't provide a pluggable way to implement user's own logic to do authentication. So I don't think the PR will meet my need. I will write a KIP to open the discussion. p.s. Ismael, can you grant me the permission to create a KIP in Kafka space? On Wed, 2

Re: Support customized security protocol

2016-01-19 Thread Ismael Juma
Hi Tao, The other way would be to implement a SASL provider: https://docs.oracle.com/javase/8/docs/technotes/guides/security/sasl/sasl-refguide.html#PROV This would still require Kafka to be changed, some of the changes are in the following PR: https://github.com/apache/kafka/pull/341 As per t

Re: Support customized security protocol

2016-01-19 Thread tao xiao
Hi Ismael, BTW looks like I don't have the permission to add a KIP in Kafka space. Can you please grant me the permission? On Wed, 20 Jan 2016 at 09:40 tao xiao wrote: > Hi Ismael, > > Thank you for your reply. I am happy to have a writeup on this. > > Can you think of any other ways to make se

Re: Support customized security protocol

2016-01-19 Thread tao xiao
Hi Ismael, Thank you for your reply. I am happy to have a writeup on this. Can you think of any other ways to make security protocol pluggable instead of extending ChannelBuilder? On Wed, 20 Jan 2016 at 02:14 Ismael Juma wrote: > Hi Tao, > > As you say, security protocols are not currently plu

Re: Support customized security protocol

2016-01-19 Thread Ismael Juma
Hi Tao, As you say, security protocols are not currently pluggable. `ChannelBuilder` is already an interface, but `SecurityProtocol` is an enum, which makes it hard for users to add additional security protocols. Changing this would probably require a KIP: https://cwiki.apache.org/confluence/disp

Support customized security protocol

2016-01-17 Thread tao xiao
Hi Kafka team, I want to know if I can plug-in my own security protocol to Kafka to implement project specific authentication mechanism. The current supported authentication protocols, SASL/GSSAPI and SSL, are not supported in my company and we have own security protocol to do authentication. Is