Skip to content

Latest commit

 

History

History
43 lines (36 loc) · 1.47 KB

README.md

File metadata and controls

43 lines (36 loc) · 1.47 KB

Authentication in Kafka

The following example assumed that the kafka server is running locally on port 9092. If not, please replace localhost:9092 with appropriate host and port of kafka server.

The kafka-console-producer.sh and kafka-console-consumer.sh are standard kafka CLIs present inside bin directory.

Add the following configs in server.properties of your Kafka server:

# SASL/PLAIN should be used only with SSL as transport layer to ensure that clear passwords are
# not transmitted on the wire without encryption.
# The configs below are just for demo, and analyse your security requirements before using.

listeners=SASL_PLAINTEXT://localhost:9092,PLAINTEXT://localhost:9094
listener.security.protocol.map=SASL_PLAINTEXT:SASL_PLAINTEXT,PLAINTEXT:PLAINTEXT
inter.broker.listener.name=PLAINTEXT
sasl.mechanism.inter.broker.protocol=PLAIN
sasl.enabled.mechanisms=PLAIN
listener.name.sasl_plaintext.plain.sasl.jaas.config= \
  org.apache.kafka.common.security.plain.PlainLoginModule required \
    username="admin" \
    password="admin-secret" \
    user_admin="admin-secret" \
    user_Alice="alice-secret";

Console Producer

kafka-console-producer.sh \
    --bootstrap-server localhost:9092 \
    --topic shopping_list \
    --producer.config client/producer.properties

Console consumer

kafka-console-consumer.sh \
  --bootstrap-server localhost:9092 \
  --topic shopping_list \
  --consumer.config client/consumer.properties