v.20.8New Feature

Support Kerberos Authentication in Kafka with krb5 and cyrus-sasl Libraries

Support Kerberos authentication in Kafka, using krb5 and cyrus-sasl libraries. #12771 (Ilya Golshtein).
ClickHouse now supports Kerberos authentication for Kafka, leveraging the krb5 and cyrus-sasl libraries to enable secure, authenticated communication.

Why it matters

This feature addresses the need for enhanced security when integrating ClickHouse with Kafka by enabling Kerberos authentication. It ensures that Kafka connections are securely authenticated, preventing unauthorized access and aligning with enterprise security requirements.

How to use it

To use Kerberos authentication with Kafka in ClickHouse, configure the Kafka engine or table with the appropriate Kerberos settings. Ensure that the krb5 and cyrus-sasl libraries are installed and properly configured on the ClickHouse server. Then, specify the necessary SASL and Kerberos parameters in the Kafka connection configuration.