配置 Talend Data Stewardship 以支持 Kerberized Apache Kafka - 8.0

Talend安装指南

Version
8.0
Language
中文(简体)
Operating system
Windows
Subscription type
订阅
Product
Talend Big Data
Talend Big Data Platform
Talend Data Fabric
Talend Data Integration
Talend Data Management Platform
Talend Data Services Platform
Talend ESB
Talend MDM Platform
Talend Real-Time Big Data Platform
Module
Talend Activity Monitoring Console
Talend Administration Center
Talend Artifact Repository
Talend CommandLine
Talend Data Preparation
Talend Data Stewardship
Talend ESB
Talend Identity and Access Management
Talend Installer
Talend JobServer
Talend Log Server
Talend MDM Server
Talend MDM Web UI
Talend Runtime
Talend SAP RFC Server
Talend Studio
Content
安装和升级
Last publication date
2022-10-30
可以设置 Talend Data Stewardship 与外部 Kerberized Apache Kafka 配合工作。

开始之前

确保您有以下资源:

  • 客户端 Kerberos 配置文件:krb5.conf
  • JAAS Kerberos 配置文件:kafka_client_jaas.conf
  • Kerberos 密钥表文件:hostname.keyTab
  • JKS 信任库:krb5.truststore

步骤

  1. 创建一个 <install_dir>/kafka-kerberos/ 目录并将以下文件复制到其中:
    • krb5.conf
    • kafka_client_jaas.conf
    • hostname.keyTab
    • krb5.truststore
  2. 添加以下 Java 选项到 <install_dir>/tds/apache-tomcat/bin/setenv.sh 文件中:
    -Djava.security.auth.login.config=<install_dir>/kafka-kerberos/kafka_client_jaas.conf
    -Djava.security.krb5.conf=<install_dir>/kafka-kerberos/krb5.conf
  3. 打开 <install_dir>/kafka-kerberos/kafka_client_jaas.conf 文件并检查 keyTab 属性是否如下所示:
    keyTab=<install_dir>/kafka-kerberos/hostname.keyTab
  4. 编辑 <install_dir>/tds/apache-tomcat/bin/conf/data-stewardship.properties 文件,以添加或编辑下列行:
    kafka.ssl.truststore.location=<install_dir>/kafka-kerberos/krk5.truststore
    kafka.ssl.truststore.password=<your_truststore_password>
    spring.cloud.stream.kafka.binder.configuration.ssl.truststore.location=${kafka.ssl.truststore.location}
    spring.cloud.stream.kafka.binder.configuration.ssl.truststore.password=${kafka.ssl.truststore.password}
    spring.kafka.properties.ssl.truststore.location=${kafka.ssl.truststore.location}
    spring.kafka.properties.ssl.truststore.password=${kafka.ssl.truststore.password}