-
Notifications
You must be signed in to change notification settings - Fork 3.7k
[feat][doc] Add saslJaasServerRoleTokenSignerSecret parameter in security-kerberos.md #15172
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
|
@liudezhi2098:Thanks for your contribution. For this PR, do we need to update docs? |
|
@momo-jun PTAL |
| |tokenAudienceClaim| The token audience "claim" name, e.g. "aud", that will be used to get the audience from token. If not set, audience will not be verified. || | ||
| |tokenAudience| The token audience stands for this broker. The field `tokenAudienceClaim` of a valid token, need contains this. || | ||
| |saslJaasClientAllowedIds|This is a regexp, which limits the range of possible ids which can connect to the Broker using SASL. By default, it is set to `SaslConstants.JAAS_CLIENT_ALLOWED_IDS_DEFAULT`, which is ".*pulsar.*", so only clients whose id contains 'pulsar' are allowed to connect.|N/A| | ||
| |saslJaasServerSectionName|Service Principal, for login context name. By default, it is set to `SaslConstants.JAAS_DEFAULT_BROKER_SECTION_NAME`, which is "PulsarBroker".|N/A| |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
| |saslJaasServerSectionName|Service Principal, for login context name. By default, it is set to `SaslConstants.JAAS_DEFAULT_BROKER_SECTION_NAME`, which is "PulsarBroker".|N/A| | |
| |saslJaasServerSectionName|Service Principal, for login context name. By default, it is set to `SaslConstants.JAAS_DEFAULT_BROKER_SECTION_NAME`, which is "PulsarBroker".|N/A| |
what's the meaning of "Service Principal, for login context name. "?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is the concept of kerberos,principal can be understood as the user's identity, will bring this identity when you log in
Co-authored-by: Anonymitaet <50226895+Anonymitaet@users.noreply.github.com>
|
Hi @liudezhi2098 , I noticed that the master code PR was merged two days ago. Does this doc PR need any updates? |
…-master handel conflic
handel conflic
need review again, thx. |
|
@liudezhi2098 I've renamed your PR based on the Pulsar PR Naming Guideline. Please follow it, thanks. |
Master Issue: #15121
Preview looks good:

Documentation
Check the box below and label this PR (if you have committer privilege).
Need to update docs?
doc