| Package | Description |
|---|---|
| org.apache.hadoop.fs |
An abstract file system API.
|
| org.apache.hadoop.ipc |
Tools to help define network clients and servers.
|
| org.apache.hadoop.security | |
| org.apache.hadoop.security.authorize |
Support for service-level authorization.
|
| org.apache.hadoop.security.rpcauth | |
| org.apache.hadoop.security.token |
Support for delegation tokens.
|
| org.apache.hadoop.security.token.delegation |
ZooKeeper secret manager for TokenIdentifiers and DelegationKeys.
|
| org.apache.hadoop.security.token.delegation.web | |
| org.apache.hadoop.util |
Common utilities.
|
| Modifier and Type | Method | Description |
|---|---|---|
UserGroupInformation |
FileContext.getUgi() |
Gets the ugi in the file-context
|
| Modifier and Type | Method | Description |
|---|---|---|
static void |
FileSystem.closeAllForUGI(UserGroupInformation ugi) |
Close all cached FileSystem instances for a given UGI.
|
| Modifier and Type | Field | Description |
|---|---|---|
UserGroupInformation |
Server.Connection.attemptingUser |
| Modifier and Type | Method | Description |
|---|---|---|
abstract UserGroupInformation |
ExternalCall.getRemoteUser() |
|
UserGroupInformation |
Server.Call.getRemoteUser() |
|
static UserGroupInformation |
Server.getRemoteUser() |
Returns the RPC remote user when invoked inside an RPC.
|
UserGroupInformation |
Schedulable.getUserGroupInformation() |
|
UserGroupInformation |
Server.Call.getUserGroupInformation() |
| Modifier and Type | Method | Description |
|---|---|---|
static <T> ProtocolProxy<T> |
RPC.getProtocolProxy(java.lang.Class<T> protocol,
long clientVersion,
java.net.InetSocketAddress addr,
UserGroupInformation ticket,
Configuration conf,
javax.net.SocketFactory factory) |
Get a protocol proxy that contains a proxy connection to a remote server
and a set of methods that are supported by the server
|
static <T> ProtocolProxy<T> |
RPC.getProtocolProxy(java.lang.Class<T> protocol,
long clientVersion,
java.net.InetSocketAddress addr,
UserGroupInformation ticket,
Configuration conf,
javax.net.SocketFactory factory,
int rpcTimeout,
RetryPolicy connectionRetryPolicy) |
Get a protocol proxy that contains a proxy connection to a remote server
and a set of methods that are supported by the server.
|
static <T> ProtocolProxy<T> |
RPC.getProtocolProxy(java.lang.Class<T> protocol,
long clientVersion,
java.net.InetSocketAddress addr,
UserGroupInformation ticket,
Configuration conf,
javax.net.SocketFactory factory,
int rpcTimeout,
RetryPolicy connectionRetryPolicy,
java.util.concurrent.atomic.AtomicBoolean fallbackToSimpleAuth) |
Get a protocol proxy that contains a proxy connection to a remote server
and a set of methods that are supported by the server.
|
static <T> ProtocolProxy<T> |
RPC.getProtocolProxy(java.lang.Class<T> protocol,
long clientVersion,
java.net.InetSocketAddress addr,
UserGroupInformation ticket,
Configuration conf,
javax.net.SocketFactory factory,
int rpcTimeout,
RetryPolicy connectionRetryPolicy,
java.util.concurrent.atomic.AtomicBoolean fallbackToSimpleAuth,
AlignmentContext alignmentContext) |
Get a protocol proxy that contains a proxy connection to a remote server
and a set of methods that are supported by the server.
|
<T> ProtocolProxy<T> |
ProtobufRpcEngine.getProxy(java.lang.Class<T> protocol,
long clientVersion,
java.net.InetSocketAddress addr,
UserGroupInformation ticket,
Configuration conf,
javax.net.SocketFactory factory,
int rpcTimeout) |
Deprecated.
|
<T> ProtocolProxy<T> |
ProtobufRpcEngine.getProxy(java.lang.Class<T> protocol,
long clientVersion,
java.net.InetSocketAddress addr,
UserGroupInformation ticket,
Configuration conf,
javax.net.SocketFactory factory,
int rpcTimeout,
RetryPolicy connectionRetryPolicy) |
Deprecated.
|
<T> ProtocolProxy<T> |
ProtobufRpcEngine.getProxy(java.lang.Class<T> protocol,
long clientVersion,
java.net.InetSocketAddress addr,
UserGroupInformation ticket,
Configuration conf,
javax.net.SocketFactory factory,
int rpcTimeout,
RetryPolicy connectionRetryPolicy,
java.util.concurrent.atomic.AtomicBoolean fallbackToSimpleAuth,
AlignmentContext alignmentContext) |
Deprecated.
|
<T> ProtocolProxy<T> |
ProtobufRpcEngine2.getProxy(java.lang.Class<T> protocol,
long clientVersion,
java.net.InetSocketAddress addr,
UserGroupInformation ticket,
Configuration conf,
javax.net.SocketFactory factory,
int rpcTimeout) |
|
<T> ProtocolProxy<T> |
ProtobufRpcEngine2.getProxy(java.lang.Class<T> protocol,
long clientVersion,
java.net.InetSocketAddress addr,
UserGroupInformation ticket,
Configuration conf,
javax.net.SocketFactory factory,
int rpcTimeout,
RetryPolicy connectionRetryPolicy) |
|
<T> ProtocolProxy<T> |
ProtobufRpcEngine2.getProxy(java.lang.Class<T> protocol,
long clientVersion,
java.net.InetSocketAddress addr,
UserGroupInformation ticket,
Configuration conf,
javax.net.SocketFactory factory,
int rpcTimeout,
RetryPolicy connectionRetryPolicy,
java.util.concurrent.atomic.AtomicBoolean fallbackToSimpleAuth,
AlignmentContext alignmentContext) |
|
static <T> T |
RPC.getProxy(java.lang.Class<T> protocol,
long clientVersion,
java.net.InetSocketAddress addr,
UserGroupInformation ticket,
Configuration conf,
javax.net.SocketFactory factory) |
Construct a client-side proxy object that implements the named protocol,
talking to a server at the named address.
|
static <T> T |
RPC.getProxy(java.lang.Class<T> protocol,
long clientVersion,
java.net.InetSocketAddress addr,
UserGroupInformation ticket,
Configuration conf,
javax.net.SocketFactory factory,
int rpcTimeout) |
Construct a client-side proxy that implements the named protocol,
talking to a server at the named address.
|
<T> ProtocolProxy<T> |
RpcEngine.getProxy(java.lang.Class<T> protocol,
long clientVersion,
java.net.InetSocketAddress addr,
UserGroupInformation ticket,
Configuration conf,
javax.net.SocketFactory factory,
int rpcTimeout,
RetryPolicy connectionRetryPolicy) |
Construct a client-side proxy object.
|
<T> ProtocolProxy<T> |
RpcEngine.getProxy(java.lang.Class<T> protocol,
long clientVersion,
java.net.InetSocketAddress addr,
UserGroupInformation ticket,
Configuration conf,
javax.net.SocketFactory factory,
int rpcTimeout,
RetryPolicy connectionRetryPolicy,
java.util.concurrent.atomic.AtomicBoolean fallbackToSimpleAuth,
AlignmentContext alignmentContext) |
Construct a client-side proxy object.
|
<T> ProtocolProxy<T> |
WritableRpcEngine.getProxy(java.lang.Class<T> protocol,
long clientVersion,
java.net.InetSocketAddress addr,
UserGroupInformation ticket,
Configuration conf,
javax.net.SocketFactory factory,
int rpcTimeout,
RetryPolicy connectionRetryPolicy) |
Deprecated.
Construct a client-side proxy object that implements the named protocol,
talking to a server at the named address.
|
<T> ProtocolProxy<T> |
WritableRpcEngine.getProxy(java.lang.Class<T> protocol,
long clientVersion,
java.net.InetSocketAddress addr,
UserGroupInformation ticket,
Configuration conf,
javax.net.SocketFactory factory,
int rpcTimeout,
RetryPolicy connectionRetryPolicy,
java.util.concurrent.atomic.AtomicBoolean fallbackToSimpleAuth,
AlignmentContext alignmentContext) |
Deprecated.
Construct a client-side proxy object that implements the named protocol,
talking to a server at the named address.
|
| Constructor | Description |
|---|---|
ConnectionId(java.net.InetSocketAddress address,
java.lang.Class<?> protocol,
UserGroupInformation ticket,
int rpcTimeout,
RetryPolicy connectionRetryPolicy,
Configuration conf) |
|
Invoker(java.lang.Class<?> protocol,
java.net.InetSocketAddress addr,
UserGroupInformation ticket,
Configuration conf,
javax.net.SocketFactory factory,
int rpcTimeout,
RetryPolicy connectionRetryPolicy,
java.util.concurrent.atomic.AtomicBoolean fallbackToSimpleAuth,
AlignmentContext alignmentContext) |
|
Invoker(java.lang.Class<?> protocol,
java.net.InetSocketAddress addr,
UserGroupInformation ticket,
Configuration conf,
javax.net.SocketFactory factory,
int rpcTimeout,
RetryPolicy connectionRetryPolicy,
java.util.concurrent.atomic.AtomicBoolean fallbackToSimpleAuth,
AlignmentContext alignmentContext) |
| Modifier and Type | Method | Description |
|---|---|---|
static UserGroupInformation |
UserGroupInformation.createProxyUser(java.lang.String user,
UserGroupInformation realUser) |
Create a proxy user using username of the effective user and the ugi of the
real user.
|
static UserGroupInformation |
UserGroupInformation.createProxyUserForTesting(java.lang.String user,
UserGroupInformation realUser,
java.lang.String[] userGroups) |
Create a proxy user UGI for testing HDFS and MapReduce
|
static UserGroupInformation |
UserGroupInformation.createRemoteUser(java.lang.String user) |
Create a user from a login name.
|
static UserGroupInformation |
UserGroupInformation.createRemoteUser(java.lang.String user,
SaslRpcServer.AuthMethod authMethod) |
Create a user from a login name.
|
static UserGroupInformation |
UserGroupInformation.createUserForTesting(java.lang.String user,
java.lang.String[] userGroups) |
Create a UGI for testing HDFS and MapReduce
|
static UserGroupInformation |
UserGroupInformation.getBestUGI(java.lang.String ticketCachePath,
java.lang.String user) |
Find the most appropriate UserGroupInformation to use
|
static UserGroupInformation |
UserGroupInformation.getCurrentUser() |
Return the current user, including any doAs in the current stack.
|
static UserGroupInformation |
UserGroupInformation.getLoginUser() |
Get the currently logged in user.
|
UserGroupInformation |
UserGroupInformation.getRealUser() |
get RealUser (vs.
|
static UserGroupInformation |
UserGroupInformation.getRealUserOrSelf(UserGroupInformation user) |
If this is a proxy user, get the real user.
|
static UserGroupInformation |
UserGroupInformation.getUGIFromSubject(javax.security.auth.Subject subject) |
Create a UserGroupInformation from a Subject with Kerberos principal.
|
static UserGroupInformation |
UserGroupInformation.getUGIFromTicketCache(java.lang.String ticketCache,
java.lang.String user) |
Create a UserGroupInformation from a Kerberos ticket cache.
|
static UserGroupInformation |
UserGroupInformation.loginUserFromKeytabAndReturnUGI(java.lang.String user,
java.lang.String path) |
Log a user in from a keytab file.
|
| Modifier and Type | Method | Description |
|---|---|---|
static UserGroupInformation |
UserGroupInformation.createProxyUser(java.lang.String user,
UserGroupInformation realUser) |
Create a proxy user using username of the effective user and the ugi of the
real user.
|
static UserGroupInformation |
UserGroupInformation.createProxyUserForTesting(java.lang.String user,
UserGroupInformation realUser,
java.lang.String[] userGroups) |
Create a proxy user UGI for testing HDFS and MapReduce
|
void |
KDiag.dumpTokens(UserGroupInformation ugi) |
Dump all tokens of a UGI.
|
static UserGroupInformation.AuthenticationMethod |
UserGroupInformation.getRealAuthenticationMethod(UserGroupInformation ugi) |
Returns the authentication method of a ugi.
|
static UserGroupInformation |
UserGroupInformation.getRealUserOrSelf(UserGroupInformation user) |
If this is a proxy user, get the real user.
|
static void |
UserGroupInformation.logAllUserInfo(UserGroupInformation ugi) |
Log all (current, real, login) UGI and token info into UGI debug log.
|
static void |
UserGroupInformation.logAllUserInfo(org.slf4j.Logger log,
UserGroupInformation ugi) |
Log all (current, real, login) UGI and token info into specified log.
|
static void |
UserGroupInformation.logUserInfo(org.slf4j.Logger log,
java.lang.String caption,
UserGroupInformation ugi) |
Log current UGI and token information into specified log.
|
static void |
UserGroupInformation.setLoginUser(UserGroupInformation ugi) |
| Constructor | Description |
|---|---|
SaslRpcClient(UserGroupInformation ugi,
java.lang.Class<?> protocol,
java.net.InetSocketAddress serverAddr,
Configuration conf) |
Create a SaslRpcClient that can be used by a RPC client to negotiate
SASL authentication with a RPC server
|
| Modifier and Type | Method | Description |
|---|---|---|
void |
DefaultImpersonationProvider.authorize(UserGroupInformation user,
java.net.InetAddress remoteAddress) |
|
default void |
ImpersonationProvider.authorize(UserGroupInformation user,
java.lang.String remoteAddress) |
Authorize the superuser which is doing doAs.
|
void |
ImpersonationProvider.authorize(UserGroupInformation user,
java.net.InetAddress remoteAddress) |
Authorize the superuser which is doing doAs.
|
static void |
ProxyUsers.authorize(UserGroupInformation user,
java.lang.String remoteAddress) |
Authorize the superuser which is doing doAs.
|
static void |
ProxyUsers.authorize(UserGroupInformation user,
java.lang.String remoteAddress,
Configuration conf) |
Deprecated.
use
ProxyUsers.authorize(UserGroupInformation, String) instead. |
static void |
ProxyUsers.authorize(UserGroupInformation user,
java.net.InetAddress remoteAddress) |
Authorize the superuser which is doing doAs.
|
void |
ServiceAuthorizationManager.authorize(UserGroupInformation user,
java.lang.Class<?> protocol,
Configuration conf,
java.net.InetAddress addr) |
Authorize the user to access the protocol being used.
|
boolean |
UsersACLsManager.checkUserAccess(UserGroupInformation reqUser,
java.lang.String owner) |
|
boolean |
AccessControlList.isUserAllowed(UserGroupInformation ugi) |
|
boolean |
AccessControlList.isUserInList(UserGroupInformation ugi) |
Checks if a user represented by the provided
UserGroupInformation
is a member of the Access Control List. |
| Modifier and Type | Method | Description |
|---|---|---|
UserGroupInformation |
RpcAuthMethod.getAuthorizedUgi(java.lang.String authorizedId,
SecretManager secretManager) |
|
UserGroupInformation |
TokenAuthMethod.getAuthorizedUgi(java.lang.String authorizedId,
SecretManager secretManager) |
|
UserGroupInformation |
KerberosAuthMethod.getUser(UserGroupInformation ticket) |
|
UserGroupInformation |
RpcAuthMethod.getUser(UserGroupInformation ticket) |
| Modifier and Type | Method | Description |
|---|---|---|
UserGroupInformation |
KerberosAuthMethod.getUser(UserGroupInformation ticket) |
|
UserGroupInformation |
RpcAuthMethod.getUser(UserGroupInformation ticket) |
|
void |
KerberosAuthMethod.writeUGI(UserGroupInformation ugi,
org.apache.hadoop.ipc.protobuf.IpcConnectionContextProtos.UserInformationProto.Builder ugiProto) |
|
void |
RpcAuthMethod.writeUGI(UserGroupInformation ugi,
org.apache.hadoop.ipc.protobuf.IpcConnectionContextProtos.UserInformationProto.Builder ugiProto) |
|
void |
SimpleAuthMethod.writeUGI(UserGroupInformation ugi,
org.apache.hadoop.ipc.protobuf.IpcConnectionContextProtos.UserInformationProto.Builder ugiProto) |
| Modifier and Type | Method | Description |
|---|---|---|
abstract UserGroupInformation |
TokenIdentifier.getUser() |
Get the Ugi with the username encoded in the token identifier
|
| Modifier and Type | Method | Description |
|---|---|---|
UserGroupInformation |
AbstractDelegationTokenIdentifier.getUser() |
Get the username encoded in the token identifier
|
| Modifier and Type | Method | Description |
|---|---|---|
static UserGroupInformation |
HttpUserGroupInformation.get() |
Returns the remote
UserGroupInformation in context for the current
HTTP request, taking into account proxy user requests. |
UserGroupInformation |
DelegationTokenManager.verifyToken(Token<? extends AbstractDelegationTokenIdentifier> token) |
| Modifier and Type | Method | Description |
|---|---|---|
Token<? extends AbstractDelegationTokenIdentifier> |
DelegationTokenManager.createToken(UserGroupInformation ugi,
java.lang.String renewer) |
|
Token<? extends AbstractDelegationTokenIdentifier> |
DelegationTokenManager.createToken(UserGroupInformation ugi,
java.lang.String renewer,
java.lang.String service) |
| Modifier and Type | Method | Description |
|---|---|---|
static UserGroupInformation |
ProtoUtil.getUgi(org.apache.hadoop.ipc.protobuf.IpcConnectionContextProtos.IpcConnectionContextProto context) |
|
static UserGroupInformation |
ProtoUtil.getUgi(org.apache.hadoop.ipc.protobuf.IpcConnectionContextProtos.UserInformationProto userInfo) |
| Modifier and Type | Method | Description |
|---|---|---|
static org.apache.hadoop.ipc.protobuf.IpcConnectionContextProtos.IpcConnectionContextProto |
ProtoUtil.makeIpcConnectionContext(java.lang.String protocol,
UserGroupInformation ugi,
RpcAuthMethod authMethod) |
This method creates the connection context using exactly the same logic
as the old connection context as was done for writable where
the effective and real users are set based on the auth method.
|
Copyright © 2008–2025 Apache Software Foundation. All rights reserved.