Kafka SASL/PLAIN

Kafka authentication via SASL/PLAIN with reloadable JAAS login configuration file.

PlainLoginModule based on org.apache.kafka.common.security.plain.PlainLoginModule which watches and reloads JAAS configuration file.

Usage

Maven build dependencies

<dependency>
  <groupId>com.github.grepplabs</groupId>
  <artifactId>kafka-sasl-plain</artifactId>
  <version>see above</version>
</dependency>

Kafka server

• download jar

mvn dependency:get \
  -Dartifact=com.github.grepplabs:kafka-sasl-plain:1.0.0:jar \
  -Dtransitive=false \
  -Ddest="kafka-sasl-plain-1.0.0.jar"

• add jar to broker CLASSPATH by coping it to Kafka libs directory
• modify JAAS configuration

kafka_server_jaas.conf:

KafkaServer {
   com.grepplabs.kafka.security.sasl.plain.PlainLoginModule required
   username="admin"
   password="admin-secret"
   user_admin="admin-secret"
   user_alice="alice-secret";
};