Package org.apache.hadoop.security.authorize

Class ProxyUsers

java.lang.Object

org.apache.hadoop.security.authorize.ProxyUsers

@Unstable
@LimitedPrivate({"HDFS","MapReduce","HBase","Hive"})
public class ProxyUsers
extends java.lang.Object

Field Summary

Fields

Modifier and Type	Field	Description
static java.lang.String	CONF_HADOOP_PROXYUSER

Constructor Summary

Constructors

Constructor	Description
ProxyUsers()

Method Summary

Modifier and Type	Method	Description
static void	authorize(UserGroupInformation user, java.lang.String remoteAddress)	Authorize the superuser which is doing doAs.
static void	authorize(UserGroupInformation user, java.lang.String remoteAddress, Configuration conf)	Deprecated. use authorize(UserGroupInformation, String) instead.
static void	authorize(UserGroupInformation user, java.net.InetAddress remoteAddress)	Authorize the superuser which is doing doAs.
static DefaultImpersonationProvider	getDefaultImpersonationProvider()
static void	refreshSuperUserGroupsConfiguration()	refresh Impersonation rules
static void	refreshSuperUserGroupsConfiguration(Configuration conf)	Refreshes configuration using the default Proxy user prefix for properties.
static void	refreshSuperUserGroupsConfiguration(Configuration conf, java.lang.String proxyUserPrefix)	Refreshes configuration using the specified Proxy user prefix for properties.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

CONF_HADOOP_PROXYUSER

public static final java.lang.String CONF_HADOOP_PROXYUSER

See Also:

Constant Field Values

Constructor Detail

ProxyUsers

public ProxyUsers()

Method Detail

refreshSuperUserGroupsConfiguration

public static void refreshSuperUserGroupsConfiguration()

refresh Impersonation rules

refreshSuperUserGroupsConfiguration

public static void refreshSuperUserGroupsConfiguration(Configuration conf,
                                                       java.lang.String proxyUserPrefix)

Refreshes configuration using the specified Proxy user prefix for properties.

Parameters:

conf - configuration

proxyUserPrefix - proxy user configuration prefix

refreshSuperUserGroupsConfiguration

public static void refreshSuperUserGroupsConfiguration(Configuration conf)

Refreshes configuration using the default Proxy user prefix for properties.

Parameters:

conf - configuration

authorize

public static void authorize(UserGroupInformation user,
                             java.lang.String remoteAddress)
                      throws AuthorizationException

Authorize the superuser which is doing doAs. authorize(UserGroupInformation, InetAddress) should be preferred to avoid possibly re-resolving the ip address.

Parameters:

user - ugi of the effective or proxy user which contains a real user

remoteAddress - the ip address of client

Throws:

AuthorizationException - Authorization Exception.

authorize

public static void authorize(UserGroupInformation user,
                             java.net.InetAddress remoteAddress)
                      throws AuthorizationException

Authorize the superuser which is doing doAs.

Parameters:

user - ugi of the effective or proxy user which contains a real user

remoteAddress - the inet address of client

Throws:

AuthorizationException - Authorization Exception.

authorize

@Deprecated
public static void authorize(UserGroupInformation user,
                             java.lang.String remoteAddress,
                             Configuration conf)
                      throws AuthorizationException

Deprecated.

use authorize(UserGroupInformation, String) instead.

This function is kept to provide backward compatibility.

Parameters:

user - user.

remoteAddress - remote address.

conf - configuration.

Throws:

AuthorizationException - Authorization Exception.

getDefaultImpersonationProvider

@VisibleForTesting
public static DefaultImpersonationProvider getDefaultImpersonationProvider()