kafka-clj.jaas — kafka-clj 4.0.3

USAGE: Use for JAAS Kerberos Plain Text

(def tcp-client (... create tcp client ...) (def c (jaas/jaas-login "KafkaClient")) (def sasl-client (jaas/sasl-client c (jaas/principal-name c) broker-host)) (jaas/sasl-handshake! tcp-client sasl-client timeout-ms)

System environment config must be set, see the project.clj file for this project. Properties required are:

-Djava.security.auth.login.config=/vagrant/vagrant/config/kafka_client_jaas.conf -Djava.security.krb5.conf=/vagrant/vagrant/config/krb5.conf

as-hex clj

(as-hex bts)

HALF-MINUTE-MS clj

handshake-loop! clj

(handshake-loop! conn sasl-client timeout-ms)

handshake-request! clj

(handshake-request! conn)

SaslHandshake API (Key: 17)

1. SizeInBytes => int16
2. api_key => INT16 (0) 17
3. api_version => INT16 (0)
4. correlation_id => INT32
5. client_id => NULLABLE_STRING
6. mechanism => String "GSSAPI" or "PLAIN";

handshake-response! clj

(handshake-response! conn timeout-ms)

;Response:

1. SizeInBytes => int16
2. correlation_id => INT32
3. error_code => INT16 0 => None, 34 => InvalidSaslState, 35 => UnsupportedVersion
4. enabled_mechanisms => [STRING]

jaas-expire-time clj

(jaas-expire-time ctx)

For all KerberosTicket(s) in the LoginContext the min auth time value is returned

jaas-expired? clj

(jaas-expired? ctx)

True if the expire time is withing 30 seconds of the current time

jaas-login clj

(jaas-login jaas-name)

jaas-logout clj

(jaas-logout ctx)

kafka-service-name clj

(kafka-service-name conf)

Search for sasl.kerberos.service.name is defined in either conf, System.properties its used, otherwise the default kafka name is used

MECHS clj

principal-name clj

(principal-name ctx)

Return the unparsed principal name e.g kafka/broker1.kafkafast@KAFKAFAST A context can have multiple principals, this method returns the first principal found

readp-resp clj

(readp-resp conn timeout-ms)

sasl-client clj

(sasl-client conf ctx host)

See https://docs.oracle.com/javase/8/docs/api/javax/security/sasl/Sasl.html servicePrincipal: should be in the format kafka/{host} see kafka-principal-name host: the kafka broker

sasl-handshake! clj

(sasl-handshake! conn
                 sasl-client
                 timeout-ms
                 &
                 {:keys [kafka-version] :or {kafka-version "0.10.0"}})

client: kafka-clj/tcp client sasl-client: jaas/sasl-client timeout-ms: timeout in milliseconds

send-read-data clj

(send-read-data conn client-resp should-read timeout-ms)

Write [int size][client-resp] then read [int size][server resp]

timeout? clj

(timeout? timeout-ms current-ms)

with-auth clj

(with-auth ctx f)