conduktor.io ↗

KIP-309 — Add toUpperCase support to sasl.kerberos.principal.to.local rule

Accepted Kafka 2.4 Security

Extends the sasl.kerberos.principal.to.local.rules parser to support a /U modifier that uppercases the resulting Linux username, mirroring the existing Hadoop auth_to_local rule syntax (HADOOP-13984). Some enterprise environments require uppercase usernames when mapping Kerberos principals, which was not possible with the existing lowercase-only /L support.

Details

AuthorManikumar Reddy O.
StatusAccepted
Kafka Version2.4
JIRAKAFKA-6883
WikiView on Apache Wiki
Created2018-06-04
Last Modified2019-09-20
Explore how this KIP affects the Kafka protocol in the Protocol Explorer, or see the full KIP database.