org.apache.hadoop.hbase.security

Class AbstractHBaseSaslRpcClient

java.lang.Object

org.apache.hadoop.hbase.security.AbstractHBaseSaslRpcClient

Direct Known Subclasses:

HBaseSaslRpcClient, NettyHBaseSaslRpcClient

@InterfaceAudience.Private
public abstract class AbstractHBaseSaslRpcClient
extends Object

A utility class that encapsulates SASL logic for RPC client. Copied from org.apache.hadoop.security

Since:

2.0.0

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
(package private) static class	AbstractHBaseSaslRpcClient.SaslClientCallbackHandler

Field Summary

Fields

Modifier and Type	Field and Description
private static byte[]	EMPTY_TOKEN
protected boolean	fallbackAllowed
private static org.slf4j.Logger	LOG
protected SaslClient	saslClient
protected Map<String,String>	saslProps

Constructor Summary

Constructors

Modifier	Constructor and Description
protected	AbstractHBaseSaslRpcClient(AuthMethod method, org.apache.hadoop.security.token.Token<? extends org.apache.hadoop.security.token.TokenIdentifier> token, String serverPrincipal, boolean fallbackAllowed) Create a HBaseSaslRpcClient for an authentication method
protected	AbstractHBaseSaslRpcClient(AuthMethod method, org.apache.hadoop.security.token.Token<? extends org.apache.hadoop.security.token.TokenIdentifier> token, String serverPrincipal, boolean fallbackAllowed, String rpcProtection) Create a HBaseSaslRpcClient for an authentication method

Method Summary

Modifier and Type	Method and Description
protected SaslClient	createDigestSaslClient(String[] mechanismNames, String saslDefaultRealm, CallbackHandler saslClientCallbackHandler)
protected SaslClient	createKerberosSaslClient(String[] mechanismNames, String userFirstPart, String userSecondPart)
void	dispose() Release resources used by wrapped saslClient
byte[]	evaluateChallenge(byte[] challenge)
byte[]	getInitialResponse()
boolean	isComplete()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

LOG

private static final org.slf4j.Logger LOG

EMPTY_TOKEN

private static final byte[] EMPTY_TOKEN

saslClient

protected final SaslClient saslClient

fallbackAllowed

protected final boolean fallbackAllowed

saslProps

protected final Map<String,String> saslProps

Constructor Detail

AbstractHBaseSaslRpcClient

protected AbstractHBaseSaslRpcClient(AuthMethod method,
                                     org.apache.hadoop.security.token.Token<? extends org.apache.hadoop.security.token.TokenIdentifier> token,
                                     String serverPrincipal,
                                     boolean fallbackAllowed)
                              throws IOException

Create a HBaseSaslRpcClient for an authentication method

Parameters:

method - the requested authentication method

token - token to use if needed by the authentication method

serverPrincipal - the server principal that we are trying to set the connection up to

fallbackAllowed - does the client allow fallback to simple authentication

Throws:

IOException

AbstractHBaseSaslRpcClient

protected AbstractHBaseSaslRpcClient(AuthMethod method,
                                     org.apache.hadoop.security.token.Token<? extends org.apache.hadoop.security.token.TokenIdentifier> token,
                                     String serverPrincipal,
                                     boolean fallbackAllowed,
                                     String rpcProtection)
                              throws IOException

Create a HBaseSaslRpcClient for an authentication method

Parameters:

method - the requested authentication method

token - token to use if needed by the authentication method

serverPrincipal - the server principal that we are trying to set the connection up to

fallbackAllowed - does the client allow fallback to simple authentication

rpcProtection - the protection level ("authentication", "integrity" or "privacy")

Throws:

IOException

Method Detail

createDigestSaslClient

protected SaslClient createDigestSaslClient(String[] mechanismNames,
                                            String saslDefaultRealm,
                                            CallbackHandler saslClientCallbackHandler)
                                     throws IOException

Throws:

IOException

createKerberosSaslClient

protected SaslClient createKerberosSaslClient(String[] mechanismNames,
                                              String userFirstPart,
                                              String userSecondPart)
                                       throws IOException

Throws:

IOException

getInitialResponse

public byte[] getInitialResponse()
                          throws SaslException

Throws:

SaslException

isComplete

public boolean isComplete()

evaluateChallenge

public byte[] evaluateChallenge(byte[] challenge)
                         throws SaslException

Throws:

SaslException

dispose

public void dispose()

Release resources used by wrapped saslClient