Package org.apache.hadoop.yarn.server.security

Class BaseNMTokenSecretManager

java.lang.Object

org.apache.hadoop.security.token.SecretManager<org.apache.hadoop.yarn.security.NMTokenIdentifier>

org.apache.hadoop.yarn.server.security.BaseNMTokenSecretManager

public class BaseNMTokenSecretManager
extends org.apache.hadoop.security.token.SecretManager<org.apache.hadoop.yarn.security.NMTokenIdentifier>

Nested Class Summary

Nested classes/interfaces inherited from class org.apache.hadoop.security.token.SecretManager

org.apache.hadoop.security.token.SecretManager.InvalidToken

Field Summary

Fields

Modifier and Type	Field	Description
protected MasterKeyData	currentMasterKey
protected java.util.concurrent.locks.Lock	readLock
protected java.util.concurrent.locks.ReadWriteLock	readWriteLock
protected int	serialNo
protected java.util.concurrent.locks.Lock	writeLock

Constructor Summary

Constructors

Constructor	Description
BaseNMTokenSecretManager()

Method Summary

Modifier and Type	Method	Description
org.apache.hadoop.yarn.security.NMTokenIdentifier	createIdentifier()	It is required for RPC
protected MasterKeyData	createNewMasterKey()
org.apache.hadoop.yarn.api.records.Token	createNMToken(org.apache.hadoop.yarn.api.records.ApplicationAttemptId applicationAttemptId, org.apache.hadoop.yarn.api.records.NodeId nodeId, java.lang.String applicationSubmitter)	Helper function for creating NMTokens.
protected byte[]	createPassword(org.apache.hadoop.yarn.security.NMTokenIdentifier identifier)
MasterKey	getCurrentKey()
static org.apache.hadoop.yarn.api.records.Token	newInstance(byte[] password, org.apache.hadoop.yarn.security.NMTokenIdentifier identifier)
byte[]	retrievePassword(org.apache.hadoop.yarn.security.NMTokenIdentifier identifier)
protected byte[]	retrivePasswordInternal(org.apache.hadoop.yarn.security.NMTokenIdentifier identifier, MasterKeyData masterKey)

Methods inherited from class org.apache.hadoop.security.token.SecretManager

checkAvailableForRead, createPassword, createSecretKey, generateSecret, retriableRetrievePassword, update

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

serialNo

protected int serialNo

readWriteLock

protected final java.util.concurrent.locks.ReadWriteLock readWriteLock

readLock

protected final java.util.concurrent.locks.Lock readLock

writeLock

protected final java.util.concurrent.locks.Lock writeLock

currentMasterKey

protected MasterKeyData currentMasterKey

Constructor Detail

BaseNMTokenSecretManager

public BaseNMTokenSecretManager()

Method Detail

createNewMasterKey

protected MasterKeyData createNewMasterKey()

getCurrentKey

@Private
public MasterKey getCurrentKey()

createPassword

protected byte[] createPassword(org.apache.hadoop.yarn.security.NMTokenIdentifier identifier)

Specified by:

createPassword in class org.apache.hadoop.security.token.SecretManager<org.apache.hadoop.yarn.security.NMTokenIdentifier>

retrievePassword

public byte[] retrievePassword(org.apache.hadoop.yarn.security.NMTokenIdentifier identifier)
                        throws org.apache.hadoop.security.token.SecretManager.InvalidToken

Specified by:

retrievePassword in class org.apache.hadoop.security.token.SecretManager<org.apache.hadoop.yarn.security.NMTokenIdentifier>

Throws:

org.apache.hadoop.security.token.SecretManager.InvalidToken

retrivePasswordInternal

protected byte[] retrivePasswordInternal(org.apache.hadoop.yarn.security.NMTokenIdentifier identifier,
                                         MasterKeyData masterKey)

createIdentifier

public org.apache.hadoop.yarn.security.NMTokenIdentifier createIdentifier()

It is required for RPC

Specified by:

createIdentifier in class org.apache.hadoop.security.token.SecretManager<org.apache.hadoop.yarn.security.NMTokenIdentifier>

createNMToken

public org.apache.hadoop.yarn.api.records.Token createNMToken(org.apache.hadoop.yarn.api.records.ApplicationAttemptId applicationAttemptId,
                                                              org.apache.hadoop.yarn.api.records.NodeId nodeId,
                                                              java.lang.String applicationSubmitter)

Helper function for creating NMTokens.

Parameters:

applicationAttemptId - application AttemptId.

nodeId - node Id.

applicationSubmitter - application Submitter.

Returns:

NMToken.

newInstance

public static org.apache.hadoop.yarn.api.records.Token newInstance(byte[] password,
                                                                   org.apache.hadoop.yarn.security.NMTokenIdentifier identifier)