001/**
002 * Licensed to the Apache Software Foundation (ASF) under one
003 * or more contributor license agreements.  See the NOTICE file
004 * distributed with this work for additional information
005 * regarding copyright ownership.  The ASF licenses this file
006 * to you under the Apache License, Version 2.0 (the
007 * "License"); you may not use this file except in compliance
008 * with the License.  You may obtain a copy of the License at
009 *
010 *     http://www.apache.org/licenses/LICENSE-2.0
011 *
012 * Unless required by applicable law or agreed to in writing, software
013 * distributed under the License is distributed on an "AS IS" BASIS,
014 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
015 * See the License for the specific language governing permissions and
016 * limitations under the License.
017 */
018package org.apache.hadoop.hbase.security;
019
020import org.apache.hbase.thirdparty.io.netty.channel.ChannelPipeline;
021import org.apache.hbase.thirdparty.io.netty.handler.codec.LengthFieldBasedFrameDecoder;
022
023import java.io.IOException;
024
025import javax.security.sasl.Sasl;
026
027import org.apache.yetus.audience.InterfaceAudience;
028import org.slf4j.Logger;
029import org.slf4j.LoggerFactory;
030import org.apache.hadoop.security.token.Token;
031import org.apache.hadoop.security.token.TokenIdentifier;
032
033/**
034 * Implement SASL logic for netty rpc client.
035 * @since 2.0.0
036 */
037@InterfaceAudience.Private
038public class NettyHBaseSaslRpcClient extends AbstractHBaseSaslRpcClient {
039  private static final Logger LOG = LoggerFactory.getLogger(NettyHBaseSaslRpcClient.class);
040
041  public NettyHBaseSaslRpcClient(AuthMethod method, Token<? extends TokenIdentifier> token,
042      String serverPrincipal, boolean fallbackAllowed, String rpcProtection) throws IOException {
043    super(method, token, serverPrincipal, fallbackAllowed, rpcProtection);
044  }
045
046  public void setupSaslHandler(ChannelPipeline p) {
047    String qop = (String) saslClient.getNegotiatedProperty(Sasl.QOP);
048    LOG.trace("SASL client context established. Negotiated QoP {}", qop);
049    if (qop == null || "auth".equalsIgnoreCase(qop)) {
050      return;
051    }
052    // add wrap and unwrap handlers to pipeline.
053    p.addFirst(new SaslWrapHandler(saslClient),
054      new LengthFieldBasedFrameDecoder(Integer.MAX_VALUE, 0, 4, 0, 4),
055      new SaslUnwrapHandler(saslClient));
056  }
057
058  public String getSaslQOP() {
059    return (String) saslClient.getNegotiatedProperty(Sasl.QOP);
060  }
061}