org.apache.hadoop.mapreduce.v2.hs

Class JHSDelegationTokenSecretManager

java.lang.Object

org.apache.hadoop.security.token.SecretManager<TokenIdent>

org.apache.hadoop.security.token.delegation.AbstractDelegationTokenSecretManager<MRDelegationTokenIdentifier>

org.apache.hadoop.mapreduce.v2.hs.JHSDelegationTokenSecretManager

@InterfaceAudience.Private
@InterfaceStability.Unstable
public class JHSDelegationTokenSecretManager
extends AbstractDelegationTokenSecretManager<MRDelegationTokenIdentifier>

A MapReduce specific delegation token secret manager. The secret manager is responsible for generating and accepting the password for each token.

Nested Class Summary

Nested classes/interfaces inherited from class org.apache.hadoop.security.token.delegation.AbstractDelegationTokenSecretManager

AbstractDelegationTokenSecretManager.DelegationTokenInformation

Nested classes/interfaces inherited from class org.apache.hadoop.security.token.SecretManager

SecretManager.InvalidToken

Field Summary

Fields inherited from class org.apache.hadoop.security.token.delegation.AbstractDelegationTokenSecretManager

allKeys, currentId, currentTokens, delegationTokenSequenceNumber, noInterruptsLock, running, storeTokenTrackingId

Constructor Summary

Constructors

Constructor and Description
JHSDelegationTokenSecretManager(long delegationKeyUpdateInterval, long delegationTokenMaxLifetime, long delegationTokenRenewInterval, long delegationTokenRemoverScanInterval) Create a secret manager

Method Summary

Methods

Modifier and Type	Method and Description
MRDelegationTokenIdentifier	createIdentifier() Create an empty token identifier.

Methods inherited from class org.apache.hadoop.security.token.delegation.AbstractDelegationTokenSecretManager

addKey, addPersistedDelegationToken, cancelToken, createPassword, createSecretKey, getAllKeys, getTokenTrackingId, getTrackingIdIfEnabled, isRunning, logExpireToken, logUpdateMasterKey, removeStoredMasterKey, removeStoredToken, renewToken, reset, retrievePassword, startThreads, stopThreads, storeNewMasterKey, storeNewToken, updateStoredToken, verifyToken

Methods inherited from class org.apache.hadoop.security.token.SecretManager

checkAvailableForRead, createPassword, generateSecret

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

JHSDelegationTokenSecretManager

public JHSDelegationTokenSecretManager(long delegationKeyUpdateInterval,
                               long delegationTokenMaxLifetime,
                               long delegationTokenRenewInterval,
                               long delegationTokenRemoverScanInterval)

Create a secret manager

Parameters:

delegationKeyUpdateInterval - the number of seconds for rolling new secret keys.

delegationTokenMaxLifetime - the maximum lifetime of the delegation tokens

delegationTokenRenewInterval - how often the tokens must be renewed

delegationTokenRemoverScanInterval - how often the tokens are scanned for expired tokens

Method Detail

createIdentifier

public MRDelegationTokenIdentifier createIdentifier()

Description copied from class: SecretManager

Create an empty token identifier.

Specified by:

createIdentifier in class SecretManager<MRDelegationTokenIdentifier>

Returns:

the newly created empty token identifier