...

DelegationTokenCommand Changes:

Allow kafka-delegation-tokens.sh script with "--create" option to take owner details from "--owner-principal" option.

bin/kafka-delegation-token.sh --bootstrap-server broker1:9092 --create -owner-principal User:owner1 --renewer-principal User:renewer1 --max-life-time 1486750745585 

Proposed Changes

The token requester must be authenticated using any of the available secure channels (Kerberos, SCRAM, SSL) to generate tokens for other users. The token requester can not use delegation token based authentication for generating tokens.

...