DataStage Kafka connector / Message Hub / Authentication via Kerberos

1k views Asked by At

This is not really a programming question - rather one about different implementation options.

I'm trying to stream data to a Message Hub on Bluemix using the Kafka connector in DataStage. The connector stage only let's me choose Kerberos for authentication. Problem is, I don't have a Kerberos server at the moment, I don't think I can set one up in Bluemix and Bluemix / Message Hub definitely requires some form of authentication, so I can't just set the authentication in DataStage to 'No' (among other reasons).

At this point, my questions are basically:

1.) Is it even possible to authorize somebody for the Message Hub service on Bluemix through a Kerberos server, that is not on Bluemix?

2.) Given that either one is possible, a Bluemix-based Kerberos server or an "external" one: As far as I understand, Kerberos can only grant access to certain services on a server. Am I right in assuming, that the Bluemix Message Hub credentials would then be part of the TGS (Ticket Granting Server) reply to the client?

3.) In case, the Kerberos approach doesn't work at all: Does it make sense to configure the consumer, producer and jaas config files on our DataStage server similar to this: https://www.youtube.com/watch?v=tt-bLtFzC_4 (around the 1:40 mark) to have a static connection as an intermediate solution? (Rightfully you might ask: "Why hasn't he tried himself?" - Well, unfortunately, I'm not the server admin...)

4.) If both ideas are perfect nonsense, how would you try to solve this?

One more thing: Unfortunately, using the REST API is currently not an option (Hopefully will be an option soon though...).

0

There are 0 answers