org.apache.hadoop.hbase

Class AuthUtil

java.lang.Object

org.apache.hadoop.hbase.AuthUtil

Deprecated.

since 2.2.0, to be marked as InterfaceAudience.Private in 4.0.0.

@Deprecated
 @InterfaceAudience.Public
public final class AuthUtil
extends Object

Utility methods for helping with security tasks. Downstream users may rely on this class to handle authenticating via keytab where long running services need access to a secure HBase cluster. Callers must ensure:

• HBase configuration files are in the Classpath
• hbase.client.keytab.file points to a valid keytab on the local filesystem
• hbase.client.kerberos.principal gives the Kerberos principal to use

 
   ChoreService choreService = null;
   // Presumes HBase configuration files are on the classpath
   final Configuration conf = HBaseConfiguration.create();
   final ScheduledChore authChore = AuthUtil.getAuthChore(conf);
   if (authChore != null) {
     choreService = new ChoreService("MY_APPLICATION");
     choreService.scheduleChore(authChore);
   }
   try {
     // do application work
   } finally {
     if (choreService != null) {
       choreService.shutdown();
     }
   }
 
 

See the "Running Canary in a Kerberos-enabled Cluster" section of the HBase Reference Guide for an example of configuring a user of this Auth Chore to run on a secure cluster.

This class will be internal used only from 2.2.0 version, and will transparently work for kerberized applications. For more, please refer Client-side Configuration for Secure Operation

See Also:

HBASE-20886

Field Summary

Fields

Modifier and Type	Field and Description
static String	HBASE_CLIENT_KERBEROS_PRINCIPAL Deprecated. Client principal
static String	HBASE_CLIENT_KEYTAB_FILE Deprecated. Client keytab file

Method Summary

Modifier and Type	Method and Description
static ScheduledChore	getAuthChore(org.apache.hadoop.conf.Configuration conf) Deprecated. Deprecated since 2.2.0, this method will be InterfaceAudience.Private use only after 4.0.0.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

HBASE_CLIENT_KEYTAB_FILE

public static final String HBASE_CLIENT_KEYTAB_FILE

Deprecated.

Client keytab file

See Also:

Constant Field Values

HBASE_CLIENT_KERBEROS_PRINCIPAL

public static final String HBASE_CLIENT_KERBEROS_PRINCIPAL

Deprecated.

Client principal

See Also:

Constant Field Values

Method Detail

getAuthChore

@Deprecated
public static ScheduledChore getAuthChore(org.apache.hadoop.conf.Configuration conf)
                                               throws IOException

Deprecated. Deprecated since 2.2.0, this method will be InterfaceAudience.Private use only after 4.0.0.

Checks if security is enabled and if so, launches chore for refreshing kerberos ticket.

Parameters:

conf - the hbase service configuration

Returns:

a ScheduledChore for renewals, if needed, and null otherwise.

Throws:

IOException

See Also:

HBASE-20886