Package org.apache.hadoop.security

Examples of org.apache.hadoop.security.KerberosInfo

267
268
269
270
271
272
273
274
275
276
277
          }
          token = tokenSelector.selectToken(
              SecurityUtil.buildTokenService(server),
              ticket.getTokens());
        }
        KerberosInfo krbInfo = SecurityUtil.getKerberosInfo(protocol, conf);
        if (krbInfo != null) {
          serverPrincipal = remoteId.getServerPrincipal();
          if (LOG.isDebugEnabled()) {
            LOG.debug("RPC Server's Kerberos principal name for protocol="
                + protocol.getCanonicalName() + " is " + serverPrincipal);
View Full Code Here
442
443
444
445
446
447
448
449
450
451
452
453
454
           * Bind the socket to the host specified in the principal name of the
           * client, to ensure Server matching address of the client connection
           * to host name in principal passed.
           */
          if (UserGroupInformation.isSecurityEnabled()) {
            KerberosInfo krbInfo =
              remoteId.getProtocol().getAnnotation(KerberosInfo.class);
            if (krbInfo != null && krbInfo.clientPrincipal() != null) {
              String host =
                SecurityUtil.getHostFromPrincipal(remoteId.getTicket().getUserName());
             
              // If host name is a valid local address then bind socket to it
              InetAddress localAddr = NetUtils.getLocalInetAddress(host);
View Full Code Here
1313
1314
1315
1316
1317
1318
1319
1320
1321
1322
1323
1324
1325
    private static String getRemotePrincipal(Configuration conf,
        InetSocketAddress address, Class<?> protocol) throws IOException {
      if (!UserGroupInformation.isSecurityEnabled() || protocol == null) {
        return null;
      }
      KerberosInfo krbInfo = SecurityUtil.getKerberosInfo(protocol, conf);
      if (krbInfo != null) {
        String serverKey = krbInfo.serverPrincipal();
        if (serverKey == null) {
          throw new IOException(
              "Can't obtain server Kerberos config key from protocol="
                  + protocol.getCanonicalName());
        }
View Full Code Here
266
267
268
269
270
271
272
273
274
275
276
          InetSocketAddress addr = remoteId.getAddress();
          token = tokenSelector.selectToken(new Text(addr.getAddress()
              .getHostAddress() + ":" + addr.getPort()),
              ticket.getTokens());
        }
        KerberosInfo krbInfo = protocol.getAnnotation(KerberosInfo.class);
        if (krbInfo != null) {
          serverPrincipal = remoteId.getServerPrincipal();
          if (LOG.isDebugEnabled()) {
            LOG.debug("RPC Server's Kerberos principal name for protocol="
                + protocol.getCanonicalName() + " is " + serverPrincipal);
View Full Code Here
1273
1274
1275
1276
1277
1278
1279
1280
1281
1282
1283
1284
1285
     private static String getRemotePrincipal(Configuration conf,
         InetSocketAddress address, Class<?> protocol) throws IOException {
       if (!UserGroupInformation.isSecurityEnabled() || protocol == null) {
         return null;
       }
       KerberosInfo krbInfo = protocol.getAnnotation(KerberosInfo.class);
       if (krbInfo != null) {
         String serverKey = krbInfo.serverPrincipal();
         if (serverKey == null) {
           throw new IOException(
               "Can't obtain server Kerberos config key from protocol="
                   + protocol.getCanonicalName());
         }
View Full Code Here
79
80
81
82
83
84
85
86
87
88
89
90
91
92
      throw new AuthorizationException("Protocol " + protocol +
                                       " is not known.");
    }
       
    // get client principal key to verify (if available)
    KerberosInfo krbInfo = protocol.getAnnotation(KerberosInfo.class);
    String clientPrincipal = null;
    if (krbInfo != null) {
      String clientKey = krbInfo.clientPrincipal();
      if (clientKey != null && !clientKey.equals("")) {
        if (hostname == null) {
          throw new AuthorizationException(
              "Can't authorize client when client hostname is null");
        }
View Full Code Here
85
86
87
88
89
90
91
92
93
94
95
96
97
98
      throw new AuthorizationException("Protocol " + protocol +
                                       " is not known.");
    }
   
    // get client principal key to verify (if available)
    KerberosInfo krbInfo = SecurityUtil.getKerberosInfo(protocol, conf);
    String clientPrincipal = null;
    if (krbInfo != null) {
      String clientKey = krbInfo.clientPrincipal();
      if (clientKey != null && !clientKey.isEmpty()) {
        try {
          clientPrincipal = SecurityUtil.getServerPrincipal(
              conf.get(clientKey), addr);
        } catch (IOException e) {
View Full Code Here
587
588
589
590
591
592
593
594
595
596
597
598
599
           * client, to ensure Server matching address of the client connection
           * to host name in principal passed.
           */
          UserGroupInformation ticket = remoteId.getTicket();
          if (ticket != null && ticket.hasKerberosCredentials()) {
            KerberosInfo krbInfo =
              remoteId.getProtocol().getAnnotation(KerberosInfo.class);
            if (krbInfo != null && krbInfo.clientPrincipal() != null) {
              String host =
                SecurityUtil.getHostFromPrincipal(remoteId.getTicket().getUserName());
             
              // If host name is a valid local address then bind socket to it
              InetAddress localAddr = NetUtils.getLocalInetAddress(host);
View Full Code Here
39
40
41
42
43
44
45
46
47
48
49
  public KerberosInfo getKerberosInfo(Class<?> protocol, Configuration conf) {
    if (!protocol
        .equals(ApplicationHistoryProtocolPB.class)) {
      return null;
    }
    return new KerberosInfo() {

      @Override
      public Class<? extends Annotation> annotationType() {
        return null;
      }
View Full Code Here
208
209
210
211
212
213
214
215
216
217
218
  public static class CustomSecurityInfo extends SecurityInfo {

    @Override
    public KerberosInfo getKerberosInfo(Class<?> protocol, Configuration conf) {
      return new KerberosInfo() {
        @Override
        public Class<? extends Annotation> annotationType() {
          return null;
        }
        @Override
View Full Code Here
TOP

Related Classes of org.apache.hadoop.security.KerberosInfo

  • org.apache.hadoop.ipc.Client$Connection
  • org.apache.hadoop.ipc.Client$ConnectionId
  • org.apache.hadoop.ipc.TestSaslRPC$CustomSecurityInfo
  • org.apache.hadoop.mapreduce.v2.security.client.ClientHSSecurityInfo
  • org.apache.hadoop.security.authorize.ServiceAuthorizationManager
  • org.apache.hadoop.yarn.security.admin.AdminSecurityInfo
  • org.apache.hadoop.yarn.security.client.ClientRMSecurityInfo
  • org.apache.hadoop.yarn.security.client.ClientTimelineSecurityInfo
  • org.apache.hadoop.yarn.server.resourcemanager.security.admin.AdminSecurityInfo
  • org.apache.hadoop.yarn.server.RMNMSecurityInfoClass
    • Copyright © 2018 www.massapicom. All rights reserved.
    All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.