User Impersonation

Describes how to disable, enable, and use impersonation with Kafka Connect.

User impersonation enables Kafka Connect jobs to be submitted as a particular user. Without impersonation, Kafka Connect submits jobs as the user that started the worker

On a HPE Ezmeral Data Fabric cluster, the impersonated user is typically the mapr user or the user specified in the MAPR_USER environment variable. By default, impersonation and PAM authentication in Kafka Connect are enabled on all types of security.

Disabling User Impersonation

To disable user impersonation, disable the PAM authentication and impersonation properties in the opt/mapr/kafka/kafka-<version>/config/connect-distributed.properties file.

  1. To disable PAM authentication, set authentication.enable=false.
  2. To disable impersonation, set impersonation.enable=false.