org.apache.hadoop.hbase.thrift

Class ThriftHttpServlet

java.lang.Object

javax.servlet.GenericServlet

javax.servlet.http.HttpServlet

org.apache.thrift.server.TServlet

org.apache.hadoop.hbase.thrift.ThriftHttpServlet

All Implemented Interfaces:

Serializable, javax.servlet.Servlet, javax.servlet.ServletConfig

@InterfaceAudience.Private
public class ThriftHttpServlet
extends org.apache.thrift.server.TServlet

Thrift Http Servlet is used for performing Kerberos authentication if security is enabled and also used for setting the user specified in "doAs" parameter.

See Also:

Serialized Form

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
private static class	ThriftHttpServlet.HttpKerberosServerAction
private static class	ThriftHttpServlet.RemoteUserIdentity Basic "struct" class to hold the final base64-encoded, authenticated GSSAPI token for the user with the given principal talking to the Thrift server.

Field Summary

Fields

Modifier and Type	Field and Description
private boolean	doAsEnabled
private HBaseServiceHandler	handler
private org.apache.hadoop.security.UserGroupInformation	httpUGI
private static org.slf4j.Logger	LOG
static String	NEGOTIATE
private boolean	securityEnabled
private static long	serialVersionUID
private org.apache.hadoop.security.UserGroupInformation	serviceUGI

Constructor Summary

Constructors

Constructor and Description
ThriftHttpServlet(org.apache.thrift.TProcessor processor, org.apache.thrift.protocol.TProtocolFactory protocolFactory, org.apache.hadoop.security.UserGroupInformation serviceUGI, org.apache.hadoop.security.UserGroupInformation httpUGI, HBaseServiceHandler handler, boolean securityEnabled, boolean doAsEnabled)

Method Summary

Modifier and Type	Method and Description
private ThriftHttpServlet.RemoteUserIdentity	doKerberosAuth(javax.servlet.http.HttpServletRequest request) Do the GSS-API kerberos authentication.
protected void	doPost(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response)

Methods inherited from class org.apache.thrift.server.TServlet

addCustomHeader, doGet, setCustomHeaders

Methods inherited from class javax.servlet.http.HttpServlet

doDelete, doHead, doOptions, doPut, doTrace, getLastModified, service, service

Methods inherited from class javax.servlet.GenericServlet

destroy, getInitParameter, getInitParameterNames, getServletConfig, getServletContext, getServletInfo, getServletName, init, init, log, log

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

serialVersionUID

private static final long serialVersionUID

See Also:

Constant Field Values

LOG

private static final org.slf4j.Logger LOG

serviceUGI

private final transient org.apache.hadoop.security.UserGroupInformation serviceUGI

httpUGI

private final transient org.apache.hadoop.security.UserGroupInformation httpUGI

handler

private final transient HBaseServiceHandler handler

doAsEnabled

private final boolean doAsEnabled

securityEnabled

private final boolean securityEnabled

NEGOTIATE

public static final String NEGOTIATE

See Also:

Constant Field Values

Constructor Detail

ThriftHttpServlet

public ThriftHttpServlet(org.apache.thrift.TProcessor processor,
                         org.apache.thrift.protocol.TProtocolFactory protocolFactory,
                         org.apache.hadoop.security.UserGroupInformation serviceUGI,
                         org.apache.hadoop.security.UserGroupInformation httpUGI,
                         HBaseServiceHandler handler,
                         boolean securityEnabled,
                         boolean doAsEnabled)

Method Detail

doPost

protected void doPost(javax.servlet.http.HttpServletRequest request,
                      javax.servlet.http.HttpServletResponse response)
               throws javax.servlet.ServletException,
                      IOException

Overrides:

doPost in class org.apache.thrift.server.TServlet

Throws:

javax.servlet.ServletException

IOException

doKerberosAuth

private ThriftHttpServlet.RemoteUserIdentity doKerberosAuth(javax.servlet.http.HttpServletRequest request)
                                                     throws HttpAuthenticationException

Do the GSS-API kerberos authentication. We already have a logged in subject in the form of httpUGI, which GSS-API will extract information from.

Throws:

HttpAuthenticationException