conduktor.io ↗

KIP-83 — Allow multiple SASL authenticated Java clients in a single JVM process

Discarded Security

KIP-83 proposes making `LoginManager` non-singleton so multiple Kafka clients within the same JVM can each hold separate SASL/GSSAPI login contexts keyed on their JAAS configuration object. The singleton design forces all clients in a JVM to share one set of credentials, preventing multi-cluster or multi-tenant producers/consumers from authenticating to different Kafka clusters with distinct identities.

Details

AuthorEdoardo Comar
StatusDiscarded
JIRAKAFKA-4180
WikiView on Apache Wiki
Created2016-09-27
Last Modified2016-12-14
Explore how this KIP affects the Kafka protocol in the Protocol Explorer, or see the full KIP database.