org.apache.hadoop.fs.http.client

Class HttpFSKerberosAuthenticator

java.lang.Object

org.apache.hadoop.security.authentication.client.KerberosAuthenticator

org.apache.hadoop.fs.http.client.HttpFSKerberosAuthenticator

All Implemented Interfaces:

Authenticator

@InterfaceAudience.Private
public class HttpFSKerberosAuthenticator
extends KerberosAuthenticator

A KerberosAuthenticator subclass that fallback to HttpFSPseudoAuthenticator.

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	HttpFSKerberosAuthenticator.DelegationTokenOperation DelegationToken operations.

Field Summary

Fields

Modifier and Type	Field and Description
static String	DELEGATION_PARAM
static String	DELEGATION_TOKEN_JSON
static String	DELEGATION_TOKEN_URL_STRING_JSON
static String	OP_PARAM
static String	RENEW_DELEGATION_TOKEN_JSON
static String	RENEWER_PARAM
static String	TOKEN_PARAM

Fields inherited from class org.apache.hadoop.security.authentication.client.KerberosAuthenticator

AUTHORIZATION, NEGOTIATE, WWW_AUTHENTICATE

Constructor Summary

Constructors

Constructor and Description
HttpFSKerberosAuthenticator()

Method Summary

Methods

Modifier and Type	Method and Description
void	authenticate(URL url, AuthenticatedURL.Token token) Performs SPNEGO authentication against the specified URL.
static void	cancelDelegationToken(URI fsURI, AuthenticatedURL.Token token, Token<?> dToken)
static Token<?>	getDelegationToken(URI fsURI, InetSocketAddress httpFSAddr, AuthenticatedURL.Token token, String renewer)
protected Authenticator	getFallBackAuthenticator() Returns the fallback authenticator if the server does not use Kerberos SPNEGO HTTP authentication.
static void	injectDelegationToken(Map<String,String> params, Token<?> dtToken)
static long	renewDelegationToken(URI fsURI, AuthenticatedURL.Token token, Token<?> dToken)

Methods inherited from class org.apache.hadoop.security.authentication.client.KerberosAuthenticator

setConnectionConfigurator

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

DELEGATION_PARAM

public static final String DELEGATION_PARAM

See Also:

Constant Field Values

TOKEN_PARAM

public static final String TOKEN_PARAM

See Also:

Constant Field Values

RENEWER_PARAM

public static final String RENEWER_PARAM

See Also:

Constant Field Values

DELEGATION_TOKEN_JSON

public static final String DELEGATION_TOKEN_JSON

See Also:

Constant Field Values

DELEGATION_TOKEN_URL_STRING_JSON

public static final String DELEGATION_TOKEN_URL_STRING_JSON

See Also:

Constant Field Values

RENEW_DELEGATION_TOKEN_JSON

public static final String RENEW_DELEGATION_TOKEN_JSON

See Also:

Constant Field Values

OP_PARAM

public static final String OP_PARAM

See Also:

Constant Field Values

Constructor Detail

HttpFSKerberosAuthenticator

public HttpFSKerberosAuthenticator()

Method Detail

getFallBackAuthenticator

protected Authenticator getFallBackAuthenticator()

Returns the fallback authenticator if the server does not use Kerberos SPNEGO HTTP authentication.

Overrides:

getFallBackAuthenticator in class KerberosAuthenticator

Returns:

a HttpFSPseudoAuthenticator instance.

injectDelegationToken

public static void injectDelegationToken(Map<String,String> params,
                         Token<?> dtToken)
                                  throws IOException

Throws:

IOException

authenticate

public void authenticate(URL url,
                AuthenticatedURL.Token token)
                  throws IOException,
                         AuthenticationException

Description copied from class: KerberosAuthenticator

Performs SPNEGO authentication against the specified URL.

If a token is given it does a NOP and returns the given token.

If no token is given, it will perform the SPNEGO authentication sequence using an HTTP OPTIONS request.

Specified by:

authenticate in interface Authenticator

Overrides:

authenticate in class KerberosAuthenticator

Parameters:

url - the URl to authenticate against.

token - the authentication token being used for the user.

Throws:

IOException - if an IO error occurred.

AuthenticationException - if an authentication error occurred.

getDelegationToken

public static Token<?> getDelegationToken(URI fsURI,
                          InetSocketAddress httpFSAddr,
                          AuthenticatedURL.Token token,
                          String renewer)
                                   throws IOException

Throws:

IOException

renewDelegationToken

public static long renewDelegationToken(URI fsURI,
                        AuthenticatedURL.Token token,
                        Token<?> dToken)
                                 throws IOException

Throws:

IOException

cancelDelegationToken

public static void cancelDelegationToken(URI fsURI,
                         AuthenticatedURL.Token token,
                         Token<?> dToken)
                                  throws IOException

Throws:

IOException