These are chat archives for allegro/hermes

4th
Jul 2016
Stevo Slavić
@sslavic
Jul 04 2016 11:40
hello
Adam Dubiel
@adamdubiel
Jul 04 2016 11:40
hi
Stevo Slavić
@sslavic
Jul 04 2016 11:40
I'm trying out hermes with zookeeper authentication
for hermes-management there is n/a for enabling authentication
is automatically enabled when username/password or scheme is defined?
not clear from docs why n/a
Adam Dubiel
@adamdubiel
Jul 04 2016 11:42
let me see..
its a bug in documentation, try storage.authorization.scheme
ah, sorry
Stevo Slavić
@sslavic
Jul 04 2016 11:44
I'm talking about zookeeper.authorization.enabled, it's false in consumers but n/a for management
Adam Dubiel
@adamdubiel
Jul 04 2016 11:44
it will work once you set any scheme/user/password
you are right the documentation is not sufficient and there should be enable/disable option for clarity
Stevo Slavić
@sslavic
Jul 04 2016 11:45
if I configure just username/password I guess storage.authorization.scheme will default to digest
Adam Dubiel
@adamdubiel
Jul 04 2016 11:46
yes, but to be on a safe side configure it as well
Stevo Slavić
@sslavic
Jul 04 2016 11:46
OK, clear, thanks
Adam Dubiel
@adamdubiel
Jul 04 2016 11:47
to remember about it: allegro/hermes#523
Stevo Slavić
@sslavic
Jul 04 2016 12:18
hm, doesn't seem to work well with Kafka 0.9 ZooKeeper authentication support
KafkaBrokerTopicManagement uses zkClient and not curator
while auth configuration only applies to curator
Adam Dubiel
@adamdubiel
Jul 04 2016 12:30
yeah, i can see that. we added auth for cluster that has no edit capabilities (consumers only), so we missed that it won't work well with management. but i see that ZkClient has a way to add auth as well, so it's quite an easy fix in one of configuration classes
Stevo Slavić
@sslavic
Jul 04 2016 12:52
AdminUtils is using now (Kafka 0.9+) Kafka's ZkUtils, so not zkClient directly
and zkUtils can be instantiated to be "secure"
Adam Dubiel
@adamdubiel
Jul 04 2016 13:02
okay, we are still in 0.8.x..
Stevo Slavić
@sslavic
Jul 04 2016 13:05
yes, and cannot just upgrade, APIs changed
Stevo Slavić
@sslavic
Jul 04 2016 13:21
if only KafkaConfiguration.zkClient was protected/overridable by subclass
Adam Dubiel
@adamdubiel
Jul 04 2016 13:25
Oh, that would be great to have :D
one less dependency to learn