Package org.apache.hadoop.security

Class SaslRpcServer

java.lang.Object

org.apache.hadoop.security.SaslRpcServer

@LimitedPrivate({"HDFS","MapReduce"})
@Evolving
public class SaslRpcServer
extends java.lang.Object

A utility class for dealing with SASL on RPC server

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	SaslRpcServer.AuthMethod	Authentication method
static class	SaslRpcServer.QualityOfProtection
static class	SaslRpcServer.SaslDigestCallbackHandler	CallbackHandler for SASL DIGEST-MD5 mechanism
static class	SaslRpcServer.SaslGssCallbackHandler	CallbackHandler for SASL GSSAPI Kerberos mechanism

Field Summary

Fields

Modifier and Type	Field	Description
RpcAuthMethod	authMethod
static org.slf4j.Logger	LOG
java.lang.String	mechanism
java.lang.String	protocol
static java.lang.String	SASL_AUTH_SECRET_MANAGER
static java.lang.String	SASL_AUTH_TOKEN
static java.lang.String	SASL_DEFAULT_REALM
static java.lang.String	SASL_KERBEROS_PRINCIPAL
java.lang.String	serverId

Constructor Summary

Constructors

Constructor	Description
SaslRpcServer(RpcAuthMethod authMethod)

Method Summary

Modifier and Type	Method	Description
javax.security.sasl.SaslServer	create(Server.Connection connection, java.util.Map<java.lang.String,java.lang.Object> saslProperties, SecretManager<TokenIdentifier> secretManager)
static <T extends TokenIdentifier> T	getIdentifier(java.lang.String id, SecretManager<T> secretManager)
static void	init(Configuration conf)
static java.lang.String[]	splitKerberosName(java.lang.String fullName)	Splitting fully qualified Kerberos name into parts.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

LOG

public static final org.slf4j.Logger LOG

SASL_DEFAULT_REALM

public static final java.lang.String SASL_DEFAULT_REALM

See Also:

Constant Field Values

SASL_AUTH_SECRET_MANAGER

public static final java.lang.String SASL_AUTH_SECRET_MANAGER

See Also:

Constant Field Values

SASL_KERBEROS_PRINCIPAL

public static final java.lang.String SASL_KERBEROS_PRINCIPAL

See Also:

Constant Field Values

SASL_AUTH_TOKEN

public static final java.lang.String SASL_AUTH_TOKEN

See Also:

Constant Field Values

authMethod

public RpcAuthMethod authMethod

mechanism

public java.lang.String mechanism

protocol

public java.lang.String protocol

serverId

public java.lang.String serverId

Constructor Detail

SaslRpcServer

@Private
@Unstable
public SaslRpcServer(RpcAuthMethod authMethod)
              throws java.io.IOException

Throws:

java.io.IOException

Method Detail

create

@Private
@Unstable
public javax.security.sasl.SaslServer create(Server.Connection connection,
                                             java.util.Map<java.lang.String,java.lang.Object> saslProperties,
                                             SecretManager<TokenIdentifier> secretManager)
                                      throws java.io.IOException,
                                             java.lang.InterruptedException

Throws:

java.io.IOException

java.lang.InterruptedException

init

public static void init(Configuration conf)

getIdentifier

public static <T extends TokenIdentifier> T getIdentifier(java.lang.String id,
                                                          SecretManager<T> secretManager)
                                                   throws SecretManager.InvalidToken

Throws:

SecretManager.InvalidToken

splitKerberosName

public static java.lang.String[] splitKerberosName(java.lang.String fullName)

Splitting fully qualified Kerberos name into parts.

Parameters:

fullName - fullName.

Returns:

splitKerberosName.