Skip to content

Kerberos authentication

When using Kerberos authentication, you need to configure the connector with:

  • the security protocol set to SASL_PLAINTEXT

  • the SASL mechanism set to GSSAPI

  • the Jaas config configured with Krb5LoginModule

  • the Kerberos service name

The following snippet provides an example:

1
2
3
4
5
kafka.bootstrap.servers=ip-192-168-0-207.us-east-2.compute.internal:9094
kafka.sasl.mechanism=GSSAPI
kafka.security.protocol=SASL_PLAINTEXT
kafka.sasl.jaas.config=com.sun.security.auth.module.Krb5LoginModule required doNotPrompt=true refreshKrb5Config=true useKeyTab=true storeKey=true keyTab="file:/opt/kafka/krb5/kafka-producer.keytab" principal="kafka-producer/ip-192-168-0-207.us-east-2.compute.internal@INTERNAL";
kafka.sasl.kerberos.service.name=kafka