JAAS and Kerberos
从 2.0 版开始,已添加了 KafkaJaasLoginModuleInitializer
类以帮助进行 Kerberos 配置。您可以将该 Bean(具有所需配置)添加到您的应用程序上下文中。以下示例配置了此类 Bean:
@Bean
public KafkaJaasLoginModuleInitializer jaasConfig() throws IOException {
KafkaJaasLoginModuleInitializer jaasConfig = new KafkaJaasLoginModuleInitializer();
jaasConfig.setControlFlag("REQUIRED");
Map<String, String> options = new HashMap<>();
options.put("useKeyTab", "true");
options.put("storeKey", "true");
options.put("keyTab", "/etc/security/keytabs/kafka_client.keytab");
options.put("principal", "kafka-client-1@EXAMPLE.COM");
jaasConfig.setOptions(options);
return jaasConfig;
}