Commit Graph

28 Commits

Author SHA1 Message Date
Todd Palino afb65688af KAFKA-4050; Allow configuration of the PRNG used for SSL
Add an optional configuration for the SecureRandom PRNG implementation, with the default behavior being the same (use the default implementation in the JDK/JRE).

Author: Todd Palino <Todd Palino>

Reviewers: Grant Henke <granthenke@gmail.com>, Ismael Juma <ismael@juma.me.uk>, Joel Koshy <jjkoshy@gmail.com>, Jiangjie Qin <becket.qin@gmail.com>, Rajini Sivaram <rajinisivaram@googlemail.com>

Closes #1747 from toddpalino/trunk

(cherry picked from commit 104d2154b6)
Signed-off-by: Joel Koshy <jjkoshy@gmail.com>
2016-08-19 11:06:46 -07:00
Ryan P 1b333c23f4 KAFKA-3667; Improve Section 7.2 Encryption and Authentication using SSL to include proper hostname verification configuration
By default Kafka is configured to allow ssl communication without hostname verification. This docs has been amended to include instructions on how to set that up in the event clients would like to take a more conservative approach.

Author: Ryan P <ryan.n.pridgeon@gmail.com>

Reviewers: Ewen Cheslack-Postava <ewen@confluent.io>, Ismael Juma <ismael@juma.me.uk>

Closes #1384 from rnpridgeon/KAFKA-3667

(cherry picked from commit c89707f)
2016-08-03 10:48:10 +01:00
Sriharsha Chintalapani 2e456cb616 MINOR: Specify keyalg RSA for SSL key generation
Author: Sriharsha Chintalapani <harsha@hortonworks.com>

Reviewers: Ismael Juma <ismael@juma.me.uk>

Closes #1416 from harshach/ssl-doc-fix

(cherry picked from commit dee3880666)
Signed-off-by: Ismael Juma <ismael@juma.me.uk>
2016-05-22 10:01:43 +01:00
Ismael Juma 542f7af7ba MINOR: Move `Incorporating Security Features in a Running Cluster` to its own section under `Security`
It was previously in the SASL section (probably by mistake).

Author: Ismael Juma <ismael@juma.me.uk>

Reviewers: Sriharsha Chintalapani <schintalapani@hortonworks.com>

Closes #1405 from ijuma/fix-security-upgrade-location-in-docs

(cherry picked from commit 2ce3285297)
Signed-off-by: Ismael Juma <ismael@juma.me.uk>
2016-05-19 17:16:50 +01:00
Rajini Sivaram 2f39fb0d15 KAFKA-3517; Add documentation for SASL/PLAIN
Documentation corresponding to KIP-43 - SASL/PLAIN and multiple mechanism support.

Author: Rajini Sivaram <rajinisivaram@googlemail.com>

Reviewers: Magnus Edenhill <apache_m@edenhill.se>, Jun Rao <junrao@gmail.com>

Closes #1232 from rajinisivaram/KAFKA-3517

(cherry picked from commit abac51dc0b)
Signed-off-by: Jun Rao <junrao@gmail.com>
2016-05-03 09:49:34 -07:00
Jun Rao 5caa800e21 trivial fix to authorization CLI table 2016-02-19 09:41:37 -08:00
Sasaki Toru 1faab034b1 MINOR: Remove multi-byte charactor in docs
There are multi-byte characters In quickstart.html and security.html.
This PR will fix it.

Author: Sasaki Toru <sasakitoa@nttdata.co.jp>

Reviewers: Grant Henke

Closes #897 from sasakitoa/remove_multi_byte_character
2016-02-10 12:50:57 -07:00
Ben Stopford 962aec1a78 MINOR: Add Rolling Upgrade Notes to Security Docs
And added info about the krb5.conf file as we don't appear to mention that in the current docs

Author: Ben Stopford <benstopford@gmail.com>

Reviewers: Ismael Juma

Closes #625 from benstopford/security_docs
2016-01-28 20:42:51 -08:00
Ismael Juma a40a2a260a MINOR: Fix syntax used for comment in JAAS config file
Simple fix, but important because the incorrect syntax causes the server not to start.

Author: Ismael Juma <ismael@juma.me.uk>

Reviewers: Grant Henke, Guozhang Wang

Closes #819 from ijuma/fix-jaas-comment-syntax
2016-01-27 10:12:58 -08:00
Vahid Hashemian d00cf520fb MINOR: Improve Kafka documentation
Improve the documentation by fixing typos, punctuations, and correcting the content.

Author: Vahid Hashemian <vahidhashemian@us.ibm.com>

Reviewers: Grant Henke <granthenke@gmail.com>, Ewen Cheslack-Postava <ewen@confluent.io>

Closes #778 from vahidhashemian/typo05/fix_documentation_typos
2016-01-23 22:26:53 -08:00
Tom Graves 401ae7707c KAFKA-3095: Add documentation on format of sasl.kerberos.principal.to.local.rules
Add some basic documentation about the format, a link to get more detailed information and an example usage.  I didn't want to make a huge section on the format since it documented elsewhere but I can expand is folks want.

https://issues.apache.org/jira/browse/KAFKA-3095

Author: Tom Graves <tgraves@yahoo-inc.com>

Reviewers: Gwen Shapira

Closes #776 from tgravescs/KAFKA-3095
2016-01-18 10:03:47 -08:00
Ismael Juma 36f5c46a5c MINOR: Security doc fixes
Simple fixes that have tripped users.

Author: Ismael Juma <ismael@juma.me.uk>

Reviewers: Ewen Cheslack-Postava <ewen@confluent.io>

Closes #745 from ijuma/security-doc-improvements
2016-01-08 16:08:38 -08:00
BINLEI XUE 9f33bfe19c Minor: fix sasl.kerberos.service.name
sasl.kerberos.service.name surround by double quote didn't work, have to remove.

Author: BINLEI XUE <kongpo0412@gmail.com>

Reviewers: Gwen Shapira

Closes #720 from secjex/patch-1
2015-12-30 08:00:43 -08:00
Jun Rao 3e0333d692 trivial change: revert incorrect change to ssl.key.password 2015-11-20 16:31:05 -08:00
Jun Rao a7726ee651 trivial change to 0.9.0 docs to fix incorrect ssl.key.password 2015-11-20 13:47:27 -08:00
Ismael Juma c7c7f4cfa7 MINOR: Documentation improvements
* Fix typo in api.html
* Mark security features as beta quality (similar to new consumer). Is there better wording?
* Improve wording and clarify things in a number of places
* Improve layout of `pre` blocks (tested locally, which doesn't seem to use the same stylesheets as the deployed version)
* Use producer.config in console-producer.sh command
* Improve SASL documentation structure

Author: Ismael Juma <ismael@juma.me.uk>

Reviewers: Jun Rao, Magnus Edenhill, Gwen Shapira

Closes #550 from ijuma/documentation-improvements
2015-11-19 07:59:03 -08:00
Jun Rao 17c6f33126 trivial fix to 0.9.0 docs 2015-11-17 19:05:53 -08:00
Parth Brahmbhatt dacd21ec4e KAFKA-2852; Updating the Authorizer CLI to use a consistent way to specify a list of values for a config options.
…ecify a list of values for a config options.

Author: Parth Brahmbhatt <brahmbhatt.parth@gmail.com>

Reviewers: Jun Rao <junrao@gmail.com>

Closes #545 from Parth-Brahmbhatt/KAFKA-2852
2015-11-17 17:46:59 -08:00
Jun Rao ae315264db trivial doc change for building customized user name 2015-11-16 17:57:59 -08:00
Grant Henke 6cbd97597c KAFKA-2809; Improve documentation linking
Often it is useful to link to a specific header within the documentation. Especially when referencing docs in the mailing lists.

This adds anchors and links for all headers in the docs.

Author: Grant Henke <granthenke@gmail.com>

Reviewers: Jun Rao <junrao@gmail.com>

Closes #498 from granthenke/doc-links
2015-11-16 14:14:17 -08:00
Jun Rao 599a31c245 trivial 0.9.0 doc changes to AclCommand 2015-11-13 17:42:50 -08:00
Jun Rao 5d87eac856 additional trivial 0.9.0 doc changes 2015-11-13 14:18:02 -08:00
Jun Rao 397306cdfe trivial doc changes 2015-11-13 10:34:15 -08:00
Gwen Shapira a8ccdc6154 KAFKA-2790: doc improvements
Author: Gwen Shapira <cshapi@gmail.com>

Reviewers: Jun Rao, Guozhang Wang

Closes #491 from gwenshap/KAFKA-2790
2015-11-11 10:54:09 -08:00
Ewen Cheslack-Postava f2031d4063 KAFKA-2774: Rename Copycat to Kafka Connect
Author: Ewen Cheslack-Postava <me@ewencp.org>

Reviewers: Gwen Shapira

Closes #456 from ewencp/kafka-2774-rename-copycat
2015-11-08 22:11:03 -08:00
Gwen Shapira f413143edd KAFKA-2441: SSL/TLS in official docs
Author: Gwen Shapira <cshapi@gmail.com>

Reviewers: Guozhang Wang

Closes #406 from gwenshap/KAFKA-2441
2015-11-03 14:25:16 -08:00
Flavio Junqueira 840e95897f KAFKA-2724: ZK Auth documentation.
Author: Flavio Junqueira <fpj@apache.org>

Reviewers: Gwen Shapira

Closes #409 from fpj/KAFKA-2724
2015-11-03 09:42:20 -08:00
Gwen Shapira 34775bd3ed KAFKA-2681: Added SASL documentation
… info from the wiki

Author: Gwen Shapira <cshapi@gmail.com>

Reviewers: Sriharsha Chintalapani, Jun Rao

Closes #401 from gwenshap/KAFKA-2681
2015-11-02 10:16:39 -08:00