-
Notifications
You must be signed in to change notification settings - Fork 2.1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[exporter/kafkaexporter] added an option to disable kerberos PA-FX-FAST negotiation #33086
base: main
Are you sure you want to change the base?
[exporter/kafkaexporter] added an option to disable kerberos PA-FX-FAST negotiation #33086
Conversation
It looks like the file needs to formatted before it can be merged, do you mind @sy-be sorting that out? |
@MovieStoreGuy , thanks for looking! I have updated the PR with linter fixes (a missing newline). Could you please rerun the workflows? Thanks! |
@MovieStoreGuy, @dmitryax, @atoulme can anyone please take a look at this? 🙏 Thanks! |
exporter/kafkaexporter/README.md
Outdated
@@ -68,6 +68,7 @@ The following settings can be optionally configured: | |||
- `password`: The Kerberos password used for authenticate with KDC | |||
- `config_file`: Path to Kerberos configuration. i.e /etc/krb5.conf | |||
- `keytab_file`: Path to keytab file. i.e /etc/security/kafka.keytab | |||
- `disable_fast_negotiation`: Disable PA-FX-FAST negotiation (Pre-Authentication Framework - Fast). Some common Kerberos implementations do not support PA-FX-FAST negotiation. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can you add a note in all of the READMEs that this is false by default?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Done!
Co-authored-by: Curtis Robert <crobert@splunk.com>
Description:
Added the
disable_fast_negotiation
configuration option for Kafka Kerberos authentication. This option allows users to disable the PA-FX-FAST negotiation, which can cause issues when Active Directory is not configured to support it. This change ensures that Kafka Exporters can function correctly in such environments.Link to tracking Issue: 26345
Testing:
disable_fast_negotiation
option in theKerberosConfig
struct.disable_fast_negotiation
is set to bothtrue
andfalse
, ensuring that the configuration is correctly applied.Documentation:
disable_fast_negotiation
configuration option.