org.apache.hadoop.hive.metastore.security

Class DelegationTokenSecretManager

java.lang.Object

org.apache.hadoop.security.token.SecretManager<TokenIdent>

org.apache.hadoop.security.token.delegation.AbstractDelegationTokenSecretManager<DelegationTokenIdentifier>

org.apache.hadoop.hive.metastore.security.DelegationTokenSecretManager

Direct Known Subclasses:

TokenStoreDelegationTokenSecretManager

public class DelegationTokenSecretManager
extends org.apache.hadoop.security.token.delegation.AbstractDelegationTokenSecretManager<DelegationTokenIdentifier>

A Hive specific delegation token secret manager. The secret manager is responsible for generating and accepting the password for each token.

Nested Class Summary

Nested classes/interfaces inherited from class org.apache.hadoop.security.token.delegation.AbstractDelegationTokenSecretManager

org.apache.hadoop.security.token.delegation.AbstractDelegationTokenSecretManager.DelegationTokenInformation

Nested classes/interfaces inherited from class org.apache.hadoop.security.token.SecretManager

org.apache.hadoop.security.token.SecretManager.InvalidToken

Field Summary

Fields inherited from class org.apache.hadoop.security.token.delegation.AbstractDelegationTokenSecretManager

allKeys, currentId, currentTokens, delegationTokenSequenceNumber, noInterruptsLock, running, storeTokenTrackingId

Constructor Summary

Constructors

Constructor and Description
DelegationTokenSecretManager(long delegationKeyUpdateInterval, long delegationTokenMaxLifetime, long delegationTokenRenewInterval, long delegationTokenRemoverScanInterval) Create a secret manager

Method Summary

Modifier and Type	Method and Description
void	cancelDelegationToken(String tokenStrForm)
DelegationTokenIdentifier	createIdentifier()
String	getDelegationToken(String ownerStr, String renewer)
protected DelegationTokenIdentifier	getTokenIdentifier(org.apache.hadoop.security.token.Token<DelegationTokenIdentifier> token)
String	getUserFromToken(String tokenStr)
long	renewDelegationToken(String tokenStrForm)
String	verifyDelegationToken(String tokenStrForm) Verify token string

Methods inherited from class org.apache.hadoop.security.token.delegation.AbstractDelegationTokenSecretManager

addKey, addPersistedDelegationToken, cancelToken, checkToken, createPassword, createSecretKey, decodeTokenIdentifier, getAllKeys, getCurrentKeyId, getDelegationKey, getDelegationTokenSeqNum, getTokenInfo, getTokenTrackingId, getTrackingIdIfEnabled, incrementCurrentKeyId, incrementDelegationTokenSeqNum, isRunning, logExpireToken, logExpireTokens, logUpdateMasterKey, removeStoredMasterKey, removeStoredToken, renewToken, reset, retrievePassword, setCurrentKeyId, setDelegationTokenSeqNum, startThreads, stopThreads, storeDelegationKey, storeNewMasterKey, storeNewToken, storeToken, updateDelegationKey, updateStoredToken, updateToken, verifyToken

Methods inherited from class org.apache.hadoop.security.token.SecretManager

checkAvailableForRead, createPassword, generateSecret, retriableRetrievePassword

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DelegationTokenSecretManager

public DelegationTokenSecretManager(long delegationKeyUpdateInterval,
                                    long delegationTokenMaxLifetime,
                                    long delegationTokenRenewInterval,
                                    long delegationTokenRemoverScanInterval)

Create a secret manager

Parameters:

delegationKeyUpdateInterval - the number of seconds for rolling new secret keys.

delegationTokenMaxLifetime - the maximum lifetime of the delegation tokens

delegationTokenRenewInterval - how often the tokens must be renewed

delegationTokenRemoverScanInterval - how often the tokens are scanned for expired tokens

Method Detail

createIdentifier

public DelegationTokenIdentifier createIdentifier()

Specified by:

createIdentifier in class org.apache.hadoop.security.token.SecretManager<DelegationTokenIdentifier>

verifyDelegationToken

public String verifyDelegationToken(String tokenStrForm)
                             throws IOException

Verify token string

Parameters:

tokenStrForm -

Returns:

user name

Throws:

IOException

getTokenIdentifier

protected DelegationTokenIdentifier getTokenIdentifier(org.apache.hadoop.security.token.Token<DelegationTokenIdentifier> token)
                                                throws IOException

Throws:

IOException

cancelDelegationToken

public void cancelDelegationToken(String tokenStrForm)
                           throws IOException

Throws:

IOException

renewDelegationToken

public long renewDelegationToken(String tokenStrForm)
                          throws IOException

Throws:

IOException

getDelegationToken

public String getDelegationToken(String ownerStr,
                                 String renewer)
                          throws IOException

Throws:

IOException

getUserFromToken

public String getUserFromToken(String tokenStr)
                        throws IOException

Throws:

IOException