Appendix: SQLstream s-Server Authentication

These environment variables provide authentication support for some of the plugins. They are referenced in the $SQLSTREAM_HOME/bin/defaultAspenRuntime.sh file which defines the variables needed by runtime scripts such as s-Server.

Property Default Value Description
SQLSTREAM_JAVA_SECURITY_KRB5_CONF /etc/krb5.conf This property is used for Kerberos authentication. The default value of the property represents the location of the kerberos configuration file and all the necessary information required to access the HDFS, Kafka or other system must be present in this configuration file. Further, krb5.conf file contains the references to other required files which must be present at the expected locations
SQLSTREAM_JAVA_SECURITY_AUTH_LOGIN_CONFIG $SQLSTREAM_HOME/catalog/jaas.conf This property is used for Java Aunthentication and Autherization Service. The default value of the property represents the location of the configuration file and all the necessary information required to access the HDFS, Kafka or other system must be present in this configuration file.

Modifying these values

If you are running the s-Server from the command line, you can set updated values before running the server. For example,

export SQLSTREAM_JAVA_SECURITY_KRB5_CONF=/etc/nonStandardKrb5.conf
$SQLSTREAM_HOME/bin/s-Server

If you are running s-Server as a service, these variable values should be added to the file /etc/default/s-serverd.

If you are running s-Server using one of the Docker images, you can set the environment variable in the docker command (in this example for sqlstream/slim) using the following commands:

docker run -d -p 5580:5580 -p 5570:5570 \
-e SQLSTREAM_JAVA_SECURITY_KRB5_CONF=/mnt/credentials/mykrb5.conf \
-e SQLSTREAM_JAVA_SECURITY_AUTH_LOGIN_CONF=/mnt/credentials/myjaas.conf \
-v path/to/credentials:/mnt/credentials \
sqlstream/slim