org.apache.hadoop.hive.metastore.security

Class HadoopThriftAuthBridge

java.lang.Object

org.apache.hadoop.hive.metastore.security.HadoopThriftAuthBridge

Direct Known Subclasses:

HadoopThriftAuthBridge23

public abstract class HadoopThriftAuthBridge
extends Object

Functions that bridge Thrift's SASL transports to Hadoop's SASL callback handlers and authentication classes. HIVE-11378 This class is not directly used anymore. It now exists only as a shell to be extended by HadoopThriftAuthBridge23 in 0.23 shims. I have made it abstract to avoid maintenance errors.

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	HadoopThriftAuthBridge.Client
static class	HadoopThriftAuthBridge.Server

Constructor Summary

Constructors

Constructor and Description
HadoopThriftAuthBridge()

Method Summary

Modifier and Type	Method and Description
HadoopThriftAuthBridge.Client	createClient()
HadoopThriftAuthBridge.Client	createClientWithConf(String authMethod)
HadoopThriftAuthBridge.Server	createServer(String keytabFile, String principalConf, String clientConf)
static HadoopThriftAuthBridge	getBridge()
String	getCanonicalHostName(String hostName) Method to get canonical-ized hostname, given a hostname (possibly a CNAME).
org.apache.hadoop.security.UserGroupInformation	getCurrentUGIWithConf(String authMethod)
abstract Map<String,String>	getHadoopSaslProperties(org.apache.hadoop.conf.Configuration conf) Read and return Hadoop SASL configuration which can be configured using "hadoop.rpc.protection"
String	getServerPrincipal(String principalConfig, String host)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

HadoopThriftAuthBridge

public HadoopThriftAuthBridge()

Method Detail

getBridge

public static HadoopThriftAuthBridge getBridge()

createClient

public HadoopThriftAuthBridge.Client createClient()

createClientWithConf

public HadoopThriftAuthBridge.Client createClientWithConf(String authMethod)

createServer

public HadoopThriftAuthBridge.Server createServer(String keytabFile,
                                                  String principalConf,
                                                  String clientConf)
                                           throws org.apache.thrift.transport.TTransportException

Throws:

org.apache.thrift.transport.TTransportException

getServerPrincipal

public String getServerPrincipal(String principalConfig,
                                 String host)
                          throws IOException

Throws:

IOException

getCanonicalHostName

public String getCanonicalHostName(String hostName)

Method to get canonical-ized hostname, given a hostname (possibly a CNAME). This should allow for service-principals to use simplified CNAMEs.

Parameters:

hostName - The hostname to be canonical-ized.

Returns:

Given a CNAME, the canonical-ized hostname is returned. If not found, the original hostname is returned.

getCurrentUGIWithConf

public org.apache.hadoop.security.UserGroupInformation getCurrentUGIWithConf(String authMethod)
                                                                      throws IOException

Throws:

IOException

getHadoopSaslProperties

public abstract Map<String,String> getHadoopSaslProperties(org.apache.hadoop.conf.Configuration conf)

Read and return Hadoop SASL configuration which can be configured using "hadoop.rpc.protection"

Parameters:

conf -

Returns:

Hadoop SASL configuration