Package org.apache.hadoop.security

Interface Summary

Interface	Description
GroupMappingServiceProvider	An interface for the implementation of a user-to-groups mapping service used by Groups.
IdMappingServiceProvider	An interface for the implementation of <userId, userName> mapping and <groupId, groupName> mapping.
RefreshUserMappingsProtocol	Protocol use

Class Summary

Class	Description
AnnotatedSecurityInfo	Constructs SecurityInfo from Annotations provided in protocol interface.
AuthenticationFilterInitializer	Initializes hadoop-auth AuthenticationFilter which provides support for Kerberos HTTP SPNEGO authentication.
CompositeGroupsMapping	An implementation of GroupMappingServiceProvider which composites other group mapping providers for determining group membership.
Credentials	A class that provides the facilities of reading and writing secret keys and Tokens.
DynamicLoginConfiguration
FastSaslClientFactory	Class for dealing with caching SASL client factories.
FastSaslServerFactory	Class for dealing with caching SASL server factories.
Groups	A user-to-groups mapping service.
HadoopKerberosName	This class implements parsing and handling of Kerberos principal names.
HttpCrossOriginFilterInitializer
IdMappingConstant	Some constants for IdMapping
IngressPortBasedResolver	An implementation of SaslPropertiesResolver.
JniBasedUnixGroupsMapping	A JNI-based implementation of GroupMappingServiceProvider that invokes libC calls to get the group memberships of a given user.
JniBasedUnixGroupsMappingWithFallback
JniBasedUnixGroupsNetgroupMapping	A JNI-based implementation of GroupMappingServiceProvider that invokes libC calls to get the group memberships of a given user.
JniBasedUnixGroupsNetgroupMappingWithFallback
KDiag	Kerberos diagnostics This operation expands some of the diagnostic output of the security code, but not all.
LdapGroupsMapping	An implementation of GroupMappingServiceProvider which connects directly to an LDAP server for determining group membership.
LdapGroupsMapping.LdapSslSocketFactory	An private internal socket factory used to create SSL sockets with custom configuration.
NetgroupCache	Class that caches the netgroups and inverts group-to-user map to user-to-group map, primarily intended for use with netgroups (as returned by getent netgrgoup) which only returns group to user mapping.
NullGroupsMapping	This class provides groups mapping for UserGroupInformation when the user group information will not be used.
ProviderUtils	Utility methods for both key and credential provider APIs.
RuleBasedLdapGroupsMapping	This class uses LdapGroupsMapping for group lookup and applies the rule configured on the group names.
SaslInputStream	A SaslInputStream is composed of an InputStream and a SaslServer (or SaslClient) so that read() methods return data that are read in from the underlying InputStream but have been additionally processed by the SaslServer (or SaslClient) object.
SaslOutputStream	A SaslOutputStream is composed of an OutputStream and a SaslServer (or SaslClient) so that write() methods first process the data before writing them out to the underlying OutputStream.
SaslPlainServer
SaslPlainServer.SaslPlainServerFactory
SaslPlainServer.SecurityProvider
SaslPropertiesResolver	Provides SaslProperties to be used for a connection.
SaslRpcClient	A utility class that encapsulates SASL logic for RPC client
SaslRpcServer	A utility class for dealing with SASL on RPC server
SaslRpcServer.SaslDigestCallbackHandler	CallbackHandler for SASL DIGEST-MD5 mechanism
SaslRpcServer.SaslGssCallbackHandler	CallbackHandler for SASL GSSAPI Kerberos mechanism
SecurityInfo
SecurityUtil	Security Utils.
SecurityUtil.QualifiedHostResolver	This an alternate resolver with important properties that the standard java resolver lacks: 1) The hostname is fully qualified.
SecurityUtil.TruststoreKeystore	Helper class to contain the Truststore/Keystore paths for the ZK client connection over SSL/TLS.
ShellBasedIdMapping	A simple shell-based implementation of IdMappingServiceProvider Map id to user name or group name.
ShellBasedUnixGroupsMapping	A simple shell-based implementation of GroupMappingServiceProvider that exec's the groups shell command to fetch the group memberships of a given user.
ShellBasedUnixGroupsNetgroupMapping	A simple shell-based implementation of GroupMappingServiceProvider that exec's the groups shell command to fetch the group memberships of a given user.
User	Save the full and short name of the user as a principal.
UserGroupInformation	User and group information for Hadoop.
UserGroupMapping
WhitelistBasedResolver	An implementation of the SaslPropertiesResolver.

Enum Summary

Enum	Description
Credentials.SerializedFormat
SaslRpcServer.AuthMethod	Authentication method
SaslRpcServer.QualityOfProtection
UserGroupInformation.AuthenticationMethod	existing types of authentications' methods
UserGroupMapping.EntityType

Exception Summary

Exception	Description
AccessControlException	An exception class for access control related issues.
KDiag.KerberosDiagsFailure	Diagnostics failures return the exit code 41, "unauthorized".
KerberosAuthException	Thrown when UserGroupInformation failed with an unrecoverable error, such as failure in kerberos login/logout, invalid subject etc.

Annotation Types Summary

Annotation Type	Description
KerberosInfo	Indicates Kerberos related information to be used