Package org.apache.hadoop.security.alias

Class KeyStoreProvider

java.lang.Object

org.apache.hadoop.security.alias.CredentialProvider

org.apache.hadoop.security.alias.AbstractJavaKeyStoreProvider

org.apache.hadoop.security.alias.KeyStoreProvider

Direct Known Subclasses:

BouncyCastleFipsKeyStoreProvider, JavaKeyStoreProvider

@Private
public abstract class KeyStoreProvider
extends AbstractJavaKeyStoreProvider

CredentialProvider based on Java Key Store API. The file may be stored in any Hadoop FileSystem using the following name mangling: bcfks://hdfs@nn1.example.com/my/creds.bcfks -> hdfs://nn1.example.com/my/creds.bcfks bcfks://file/home/larry/creds.bcfks -> file:///home/user1/creds.bcfks

Nested Class Summary

Nested classes/interfaces inherited from class org.apache.hadoop.security.alias.CredentialProvider

CredentialProvider.CredentialEntry

Field Summary

Fields inherited from class org.apache.hadoop.security.alias.AbstractJavaKeyStoreProvider

CREDENTIAL_PASSWORD_DEFAULT, CREDENTIAL_PASSWORD_ENV_VAR, CREDENTIAL_PASSWORD_FILE_KEY, LOG

Fields inherited from class org.apache.hadoop.security.alias.CredentialProvider

CLEAR_TEXT_FALLBACK

Constructor Summary

Constructors

Modifier	Constructor	Description
protected	KeyStoreProvider(java.net.URI uri, Configuration conf)

Method Summary

Modifier and Type	Method	Description
protected void	createPermissions(java.lang.String perms)
protected java.io.InputStream	getInputStreamForFile()
protected java.io.OutputStream	getOutputStreamForKeystore()
protected void	initFileSystem(java.net.URI uri)
protected boolean	keystoreExists()
protected void	stashOriginalFilePermissions()

Methods inherited from class org.apache.hadoop.security.alias.AbstractJavaKeyStoreProvider

bytesToChars, createCredentialEntry, deleteCredentialEntry, flush, getAlgorithm, getAliases, getConf, getCredentialEntry, getKeyStore, getKeyStoreType, getPassword, getPath, getPathAsString, getReadLock, getSchemeName, getUri, getWriteLock, isChanged, needsPassword, noPasswordError, noPasswordWarning, setChanged, setPassword, setPath, setReadLock, setWriteLock, toString

Methods inherited from class org.apache.hadoop.security.alias.CredentialProvider

isTransient

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Detail

KeyStoreProvider

protected KeyStoreProvider(java.net.URI uri,
                           Configuration conf)
                    throws java.io.IOException

Throws:

java.io.IOException

Method Detail

getOutputStreamForKeystore

protected java.io.OutputStream getOutputStreamForKeystore()
                                                   throws java.io.IOException

Specified by:

getOutputStreamForKeystore in class AbstractJavaKeyStoreProvider

Throws:

java.io.IOException

keystoreExists

protected boolean keystoreExists()
                          throws java.io.IOException

Specified by:

keystoreExists in class AbstractJavaKeyStoreProvider

Throws:

java.io.IOException

getInputStreamForFile

protected java.io.InputStream getInputStreamForFile()
                                             throws java.io.IOException

Specified by:

getInputStreamForFile in class AbstractJavaKeyStoreProvider

Throws:

java.io.IOException

createPermissions

protected void createPermissions(java.lang.String perms)

Specified by:

createPermissions in class AbstractJavaKeyStoreProvider

stashOriginalFilePermissions

protected void stashOriginalFilePermissions()
                                     throws java.io.IOException

Specified by:

stashOriginalFilePermissions in class AbstractJavaKeyStoreProvider

Throws:

java.io.IOException

initFileSystem

protected void initFileSystem(java.net.URI uri)
                       throws java.io.IOException

Overrides:

initFileSystem in class AbstractJavaKeyStoreProvider

Throws:

java.io.IOException