org.apache.hadoop.hbase.test

Class IntegrationTestZKAndFSPermissions

java.lang.Object

org.apache.hadoop.hbase.util.AbstractHBaseTool

org.apache.hadoop.hbase.test.IntegrationTestZKAndFSPermissions

All Implemented Interfaces:

org.apache.hadoop.conf.Configurable, org.apache.hadoop.util.Tool

public class IntegrationTestZKAndFSPermissions
extends org.apache.hadoop.hbase.util.AbstractHBaseTool

An integration test which checks that the znodes in zookeeper and data in the FileSystem are protected for secure HBase deployments. This test is intended to be run on clusters with kerberos authorization for HBase and ZooKeeper. If hbase.security.authentication is not set to kerberos, the test does not run unless -f is specified which bypasses the check. It is recommended to always run with -f on secure clusters so that the test checks the actual end result, not the configuration. The test should be run as hbase user with kinit / TGT cached since it accesses HDFS.

Example usage: hbase org.apache.hadoop.hbase.test.IntegrationTestZnodeACLs -h

Field Summary

Fields

Modifier and Type	Field and Description
static String	FORCE_CHECK_ARG
static String	FS_PERMS
private String	fsPerms
private boolean	isForce
private static org.slf4j.Logger	LOG
private String	masterPrincipal
static String	PRINCIPAL_ARG
static String	SKIP_CHECK_FS
static String	SKIP_CHECK_ZK
private boolean	skipFSCheck
private boolean	skipZKCheck
private String	superUser
static String	SUPERUSER_ARG

Fields inherited from class org.apache.hadoop.hbase.util.AbstractHBaseTool

cmdLineArgs, conf, EXIT_FAILURE, EXIT_SUCCESS, LONG_HELP_OPTION, options, SHORT_HELP_OPTION

Constructor Summary

Constructors

Constructor and Description
IntegrationTestZKAndFSPermissions()

Method Summary

Modifier and Type	Method and Description
protected void	addOptions()
private void	assertZnodePerms(org.apache.hadoop.hbase.zookeeper.RecoverableZooKeeper zk, String znode, boolean expectedWorldReadable)
private void	checkZnodePermsRecursive(org.apache.hadoop.hbase.zookeeper.ZKWatcher watcher, org.apache.hadoop.hbase.zookeeper.RecoverableZooKeeper zk, String znode)
protected int	doWork()
private String	getShortUserName(String principal)
static void	main(String[] args)
protected void	processOptions(org.apache.hbase.thirdparty.org.apache.commons.cli.CommandLine cmd)
void	setConf(org.apache.hadoop.conf.Configuration conf)
private void	testFSPerms()
private void	testZNodeACLs()

Methods inherited from class org.apache.hadoop.hbase.util.AbstractHBaseTool

addOption, addOptNoArg, addOptNoArg, addOptWithArg, addOptWithArg, addRequiredOption, addRequiredOptWithArg, addRequiredOptWithArg, doStaticMain, getConf, getOptionAsDouble, getOptionAsInt, getOptionAsLong, newParser, parseArgs, parseInt, parseLong, printUsage, printUsage, processOldArgs, run

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

LOG

private static final org.slf4j.Logger LOG

superUser

private String superUser

masterPrincipal

private String masterPrincipal

isForce

private boolean isForce

fsPerms

private String fsPerms

skipFSCheck

private boolean skipFSCheck

skipZKCheck

private boolean skipZKCheck

FORCE_CHECK_ARG

public static final String FORCE_CHECK_ARG

See Also:

Constant Field Values

PRINCIPAL_ARG

public static final String PRINCIPAL_ARG

See Also:

Constant Field Values

SUPERUSER_ARG

public static final String SUPERUSER_ARG

See Also:

Constant Field Values

FS_PERMS

public static final String FS_PERMS

See Also:

Constant Field Values

SKIP_CHECK_FS

public static final String SKIP_CHECK_FS

See Also:

Constant Field Values

SKIP_CHECK_ZK

public static final String SKIP_CHECK_ZK

See Also:

Constant Field Values

Constructor Detail

IntegrationTestZKAndFSPermissions

public IntegrationTestZKAndFSPermissions()

Method Detail

setConf

public void setConf(org.apache.hadoop.conf.Configuration conf)

Specified by:

setConf in interface org.apache.hadoop.conf.Configurable

Overrides:

setConf in class org.apache.hadoop.hbase.util.AbstractHBaseTool

addOptions

protected void addOptions()

Specified by:

addOptions in class org.apache.hadoop.hbase.util.AbstractHBaseTool

processOptions

protected void processOptions(org.apache.hbase.thirdparty.org.apache.commons.cli.CommandLine cmd)

Specified by:

processOptions in class org.apache.hadoop.hbase.util.AbstractHBaseTool

getShortUserName

private String getShortUserName(String principal)

doWork

protected int doWork()
              throws Exception

Specified by:

doWork in class org.apache.hadoop.hbase.util.AbstractHBaseTool

Throws:

Exception

testZNodeACLs

private void testZNodeACLs()
                    throws IOException,
                           org.apache.zookeeper.KeeperException,
                           InterruptedException

Throws:

IOException

org.apache.zookeeper.KeeperException

InterruptedException

checkZnodePermsRecursive

private void checkZnodePermsRecursive(org.apache.hadoop.hbase.zookeeper.ZKWatcher watcher,
                                      org.apache.hadoop.hbase.zookeeper.RecoverableZooKeeper zk,
                                      String znode)
                               throws org.apache.zookeeper.KeeperException,
                                      InterruptedException

Throws:

org.apache.zookeeper.KeeperException

InterruptedException

assertZnodePerms

private void assertZnodePerms(org.apache.hadoop.hbase.zookeeper.RecoverableZooKeeper zk,
                              String znode,
                              boolean expectedWorldReadable)
                       throws org.apache.zookeeper.KeeperException,
                              InterruptedException

Throws:

org.apache.zookeeper.KeeperException

InterruptedException

testFSPerms

private void testFSPerms()
                  throws IOException

Throws:

IOException

main

public static void main(String[] args)
                 throws Exception

Throws:

Exception