User Guide

1.1
- 1.3
- 1.2
- 1.0

Back Next

If You Use Kerberos Authentication for Client Communication with the Kafka Server

You can enable PowerExchange CDC Publisher, as a producer client, to communicate securely with an Apache Kafka server that uses Kerberos for client authentication.

If you use Kerberos authentication in your Kafka target environment, perform the following tasks to allow CDC Publisher to securely communicate with the Kafka server:

Edit the PwxCDCPublisher startup script to include the local Java Authentication and Authorization Service (JAAS) login configuration file for the Kerberos environment. In the RUN environment variable, before the reference to SimpleServerForQAdapter, add a line for the java.security.auth.login.config property, which points to the JAAS configuration file on the local machine where the CDC Publisher runs. For example:

RUN="$RUN -Djava.security.auth.login.config=/opt/kafka_client_jaas.conf"
RUN="$RUN com.informatica.rat.pwxqadapter.SimpleServerForQAdapter"

Ensure that the Kafka producer.properties file on the CDC Publisher system includes the following entries:

security.protocol=SASL_PLAINTEXT
sasl.mechanism=GSSAPI
sasl.kerberos.service.name=xxxx

The xxxx variable represents the value of the following option in the JAAS configuration file:

principal="xxxx/..."

Also ensure that the Connector.kafkaProducerPropertiesFile property in the cdcPublisherKafka.cfg configuration file points to this producer.propeties file.

For more information, see the Apache Kafka security documentation at http://kafka.apache.org/documentation/#security.

Rename Saved Search

Table of Contents

User Guide

User Guide

If You Use Kerberos Authentication for Client Communication with the Kafka Server

If You Use Kerberos Authentication for Client Communication with the Kafka Server