conduktor.io ↗

KIP-203 — Add toLowerCase support to sasl.kerberos.principal.to.local rule

Accepted Kafka 1.1 Security

Extends sasl.kerberos.principal.to.local.rules with a /L modifier that lowercases the resulting principal name, enabling mapping of Kerberos principals like user@REALM to lowercase Linux usernames. Without this, the default principal extraction produces case-sensitive names that don't match lowercase Linux users, causing authentication failures.

Details

AuthorManikumar Reddy O.
StatusAccepted
Kafka Version1.1
JIRAKAFKA-5764
WikiView on Apache Wiki
Created2017-09-18
Last Modified2019-09-02
Explore how this KIP affects the Kafka protocol in the Protocol Explorer, or see the full KIP database.