Yang, Tong 6182f91ba8 MRS component operation guide_normal 2.0.38.SP20 version
Reviewed-by: Hasko, Vladimir <vladimir.hasko@t-systems.com>
Co-authored-by: Yang, Tong <yangtong2@huawei.com>
Co-committed-by: Yang, Tong <yangtong2@huawei.com>
2022-12-09 14:55:21 +00:00

56 lines
4.6 KiB
HTML

<a name="mrs_01_1574"></a><a name="mrs_01_1574"></a>
<h1 class="topictitle1">Kerberos-based Security</h1>
<div id="body1596163871752"><div class="section" id="mrs_01_1574__s11ef75af20ba44d79007564875dbfe68"><h4 class="sectiontitle">Scenarios</h4><p id="mrs_01_1574__ab995a18a6f8a4e298f2ed0a71fe27a86">Flink Kerberos configuration items must be configured in security mode.</p>
</div>
<div class="section" id="mrs_01_1574__sce02c734e01e49e7847b71bc4279d078"><h4 class="sectiontitle">Configuration Description</h4><p id="mrs_01_1574__a627833aa44b54df0921bdf1b1b7a5f14">The configuration items include <strong id="mrs_01_1574__b397821803417">keytab</strong> and <strong id="mrs_01_1574__b1219592217346">principal</strong> of Kerberos.</p>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="mrs_01_1574__te1e4538537c04f1eb56c9bbedb7cf8c3" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Parameters</caption><thead align="left"><tr id="mrs_01_1574__r10cf40024310477ebf18596ee7f5a4cb"><th align="left" class="cellrowborder" valign="top" width="27.480000000000004%" id="mcps1.3.2.3.2.5.1.1"><p id="mrs_01_1574__aa93a418533c1443ebfdc23fae4eb41bd">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="30.380000000000006%" id="mcps1.3.2.3.2.5.1.2"><p id="mrs_01_1574__a4c5b6412857142428d06f0d493420ac1">Description</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="26.680000000000003%" id="mcps1.3.2.3.2.5.1.3"><p id="mrs_01_1574__af35b094f4dab4042baacffed4761851d">Default Value</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="15.46%" id="mcps1.3.2.3.2.5.1.4"><p id="mrs_01_1574__a704f7c177f9c480498fcd6414e67e9c4">Mandatory</p>
</th>
</tr>
</thead>
<tbody><tr id="mrs_01_1574__rabdcd490ea7345188069c088680c1daf"><td class="cellrowborder" valign="top" width="27.480000000000004%" headers="mcps1.3.2.3.2.5.1.1 "><p id="mrs_01_1574__a85b8f57889c04bcab6cd21acafaf152a">security.kerberos.login.keytab</p>
</td>
<td class="cellrowborder" valign="top" width="30.380000000000006%" headers="mcps1.3.2.3.2.5.1.2 "><p id="mrs_01_1574__a957599187b304c0fa3f0eeadc628632b">Keytab file path. This parameter is a client parameter.</p>
</td>
<td class="cellrowborder" valign="top" width="26.680000000000003%" headers="mcps1.3.2.3.2.5.1.3 "><p id="mrs_01_1574__ae60c228438c047a5bd830624baab8101">Configure the parameter based on actual service requirements.</p>
</td>
<td class="cellrowborder" valign="top" width="15.46%" headers="mcps1.3.2.3.2.5.1.4 "><p id="mrs_01_1574__a1d0ac504bf0f45ecac2da0c69cb86699">Yes</p>
</td>
</tr>
<tr id="mrs_01_1574__r691b0188c09a47e4bda5e5bfcdb2400c"><td class="cellrowborder" valign="top" width="27.480000000000004%" headers="mcps1.3.2.3.2.5.1.1 "><p id="mrs_01_1574__a24c32334b6204ccc8a4759a7d907873e">security.kerberos.login.principal</p>
</td>
<td class="cellrowborder" valign="top" width="30.380000000000006%" headers="mcps1.3.2.3.2.5.1.2 "><p id="mrs_01_1574__aea3aef0dd1b24ce18cad67080375153a">A parameter on the client. If <strong id="mrs_01_1574__b3973687971003">security.kerberos.login.keytab</strong> and <strong id="mrs_01_1574__b12591577801003">security.kerberos.login.principal</strong> are both set, keytab certificate is used by default.</p>
</td>
<td class="cellrowborder" valign="top" width="26.680000000000003%" headers="mcps1.3.2.3.2.5.1.3 "><p id="mrs_01_1574__aba2ab78e52754af8a1a25a9b922442bf">Configure the parameter based on actual service requirements.</p>
</td>
<td class="cellrowborder" valign="top" width="15.46%" headers="mcps1.3.2.3.2.5.1.4 "><p id="mrs_01_1574__aa45ce1f884154ac99ffcb143c14fb044">No</p>
</td>
</tr>
<tr id="mrs_01_1574__r988dee09f0984048a66e28e24cc7ea17"><td class="cellrowborder" valign="top" width="27.480000000000004%" headers="mcps1.3.2.3.2.5.1.1 "><p id="mrs_01_1574__a6616d9ebf0ad4e588055b4bae3a4079e">security.kerberos.login.contexts</p>
</td>
<td class="cellrowborder" valign="top" width="30.380000000000006%" headers="mcps1.3.2.3.2.5.1.2 "><p id="mrs_01_1574__a4502001a5f4c43b2b1f45861317e4a5b">Contexts of the jass file generated by Flink. This parameter is a server parameter.</p>
</td>
<td class="cellrowborder" valign="top" width="26.680000000000003%" headers="mcps1.3.2.3.2.5.1.3 "><p id="mrs_01_1574__adae4f86df499445b83c8415f87d22892">Client, KafkaClient</p>
</td>
<td class="cellrowborder" valign="top" width="15.46%" headers="mcps1.3.2.3.2.5.1.4 "><p id="mrs_01_1574__a6c452d75bec145beb9b7e4d540eb5e29">Yes</p>
</td>
</tr>
</tbody>
</table>
</div>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="mrs_01_0592.html">Flink Configuration Management</a></div>
</div>
</div>