Details
-
Bug
-
Status: Resolved
-
Blocker
-
Resolution: Duplicate
-
2.4.0
Description
The kafka-broker/authorizer.class.name property is not being set properly when Kerberos is enabled.
The following logic should be followed:
if Kerberos is enabled if ranger-kafka-plugin-properties/ranger-kafka-plugin-enabled == yes set authorizer.class.name to "org.apache.ranger.authorization.kafka.authorizer.RangerKafkaAuthorizer" else set authorizer.class.name to "kafka.security.auth.SimpleAclAuthorizer" else remove authorizer.class.name
This should be updated in the stack advisor code.
While at it, configurations from Kafka's kerberos.json file should be moved to the stack advisor to help ensure properties are set in the the same place to help with code maintenance and consistency.
Attachments
Issue Links
- duplicates
-
AMBARI-17479 authorizer.class.name not being set on secure kafka clusters
- Resolved