Field Detail

• LOG

  private static final org.apache.commons.logging.Log LOG

• fallbackAllowed

  private final boolean fallbackAllowed

• ticket

  private final org.apache.hadoop.security.UserGroupInformation ticket

• saslClient

  private final SaslClient saslClient

  Used for client or server's token to send or receive from each other.

• exceptionHandler

  private final SaslClientHandler.SaslExceptionHandler exceptionHandler

• successfulConnectHandler

  private final SaslClientHandler.SaslSuccessfulConnectHandler successfulConnectHandler

• saslToken

  private byte[] saslToken

• firstRead

  private boolean firstRead

• retryCount

  private int retryCount

• random

  private Random random

Constructor Detail

• SaslClientHandler

  public SaslClientHandler(org.apache.hadoop.security.UserGroupInformation ticket,
                   AuthMethod method,
                   org.apache.hadoop.security.token.Token<? extends org.apache.hadoop.security.token.TokenIdentifier> token,
                   String serverPrincipal,
                   boolean fallbackAllowed,
                   String rpcProtection,
                   SaslClientHandler.SaslExceptionHandler exceptionHandler,
                   SaslClientHandler.SaslSuccessfulConnectHandler successfulConnectHandler)
                    throws IOException

  Constructor

  Parameters:

  ticket - the ugi

  method - auth method

  token - for Sasl

  serverPrincipal - Server's Kerberos principal name

  fallbackAllowed - True if server may also fall back to less secure connection

  rpcProtection - Quality of protection. Can be 'authentication', 'integrity' or 'privacy'.

  exceptionHandler - handler for exceptions

  successfulConnectHandler - handler for succesful connects

  Throws:

  IOException - if handler could not be created

Method Detail

• createDigestSaslClient

  protected SaslClient createDigestSaslClient(String[] mechanismNames,
                                  String saslDefaultRealm,
                                  CallbackHandler saslClientCallbackHandler)
                                       throws IOException

  Create a Digest Sasl client

  Parameters:

  mechanismNames - names of mechanisms

  saslDefaultRealm - default realm for sasl

  saslClientCallbackHandler - handler for the client

  Returns:

  new SaslClient

  Throws:

  IOException - if creation went wrong

• createKerberosSaslClient

  protected SaslClient createKerberosSaslClient(String[] mechanismNames,
                                    String userFirstPart,
                                    String userSecondPart)
                                         throws IOException

  Create Kerberos client

  Parameters:

  mechanismNames - names of mechanisms

  userFirstPart - first part of username

  userSecondPart - second part of username

  Returns:

  new SaslClient

  Throws:

  IOException - if fails

• channelUnregistered

  public void channelUnregistered(io.netty.channel.ChannelHandlerContext ctx)
                           throws Exception

  Specified by:

  channelUnregistered in interface io.netty.channel.ChannelInboundHandler

  Overrides:

  channelUnregistered in class io.netty.channel.ChannelInboundHandlerAdapter

  Throws:

  Exception

• evaluateChallenge

  private byte[] evaluateChallenge(byte[] challenge)
                            throws Exception

  Throws:

  Exception

• handlerAdded

  public void handlerAdded(io.netty.channel.ChannelHandlerContext ctx)
                    throws Exception

  Specified by:

  handlerAdded in interface io.netty.channel.ChannelHandler

  Overrides:

  handlerAdded in class io.netty.channel.ChannelHandlerAdapter

  Throws:

  Exception

• channelRead

  public void channelRead(io.netty.channel.ChannelHandlerContext ctx,
                 Object msg)
                   throws Exception

  Specified by:

  channelRead in interface io.netty.channel.ChannelInboundHandler

  Overrides:

  channelRead in class io.netty.channel.ChannelInboundHandlerAdapter

  Throws:

  Exception

• writeSaslToken

  private void writeSaslToken(io.netty.channel.ChannelHandlerContext ctx,
                    byte[] saslToken)

  Write SASL token

  Parameters:

  ctx - to write to

  saslToken - to write

• readStatus

  private static void readStatus(io.netty.buffer.ByteBuf inStream)
                          throws org.apache.hadoop.ipc.RemoteException

  Get the read status

  Parameters:

  inStream - to read

  Throws:

  org.apache.hadoop.ipc.RemoteException - if status was not success

• exceptionCaught

  public void exceptionCaught(io.netty.channel.ChannelHandlerContext ctx,
                     Throwable cause)
                       throws Exception

  Specified by:

  exceptionCaught in interface io.netty.channel.ChannelHandler

  Specified by:

  exceptionCaught in interface io.netty.channel.ChannelInboundHandler

  Overrides:

  exceptionCaught in class io.netty.channel.ChannelInboundHandlerAdapter

  Throws:

  Exception

• write

  public void write(io.netty.channel.ChannelHandlerContext ctx,
           Object msg,
           io.netty.channel.ChannelPromise promise)
             throws Exception

  Specified by:

  write in interface io.netty.channel.ChannelOutboundHandler

  Overrides:

  write in class io.netty.channel.ChannelDuplexHandler

  Throws:

  Exception