This Confluence has been LDAP enabled, if you are an ASF Committer, please use your LDAP Credentials to login. Any problems file an INFRA jira ticket please.

Child pages
  • KIP-473: Enable KafkaLog4JAppender to use SASL Authentication Callback Handlers
Skip to end of metadata
Go to start of metadata

This page is meant as a template for writing a KIP. To create a KIP choose Tools->Copy on this page and modify with your content and replace the heading with the next KIP number and a description of your issue. Replace anything in italics with your own description.

Status

Current state"Under Discussion"

Discussion thread: here

JIRA KAFKA-8419 - Getting issue details... STATUS

Please keep the discussion on the mailing list rather than commenting on the wiki (wiki discussions get unwieldy fast).

Motivation

KIP-425 provides the Kafka Log4j appender with SASL based authentication to allow logging to SASL enabled Kafka clusters. Currently credentials must be defined statically within the JAAS configuration similar to DIGESt-MD5 in Zookeeper and older versions of Kafka. KIP-86 has since been adopted giving Kafka the ability to obtain credentials from alternative credentials stores.  This KIP intends to expose the configuration properties used to enable this functionality in the underlying client.   

Public Interfaces


public
void setSaslLoginCallbackHandler(String saslLoginCallbackHandler)

Proposed Changes

The Public Interfaces section covers the proposed changes.

Compatibility, Deprecation, and Migration Plan

The proposal only changes behavior if the new configs are specified, so there are no compatibility concerns.

Rejected Alternatives

N/A

  • No labels