distinguished name

The full name in a certificate's subject, made of attributes such as CN, OU and O.

With TLS client authentication Kafka uses the client certificate's distinguished name as the principal, such as CN=depot-app,OU=Depots,O=Parcels. Principal mapping rules shorten it to a plain user name for ACLs.

Related terms

• common-name
• principal-mapping-rules
• x509-certificate

Certification courses

• CCDAK and CCAAK course and practice exams: Confluent Apache Kafka certifications