Package org.apache.hadoop.hbase.thrift

Class ThriftHttpServlet

java.lang.Object

javax.servlet.GenericServlet

javax.servlet.http.HttpServlet

org.apache.thrift.server.TServlet

org.apache.hadoop.hbase.thrift.ThriftHttpServlet

All Implemented Interfaces:

Serializable, javax.servlet.Servlet, javax.servlet.ServletConfig

@Private
public class ThriftHttpServlet
extends org.apache.thrift.server.TServlet

Thrift Http Servlet is used for performing Kerberos authentication if security is enabled and also used for setting the user specified in "doAs" parameter.

See Also:

• Serialized Form

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
private static class	ThriftHttpServlet.HttpKerberosServerAction
private static class	ThriftHttpServlet.RemoteUserIdentity	Basic "struct" class to hold the final base64-encoded, authenticated GSSAPI token for the user with the given principal talking to the Thrift server.

Field Summary

Fields

Modifier and Type	Field	Description
private final boolean	doAsEnabled
private final HBaseServiceHandler	handler
private final org.apache.hadoop.security.UserGroupInformation	httpUGI
private static final org.slf4j.Logger	LOG
static final String	NEGOTIATE
private final boolean	securityEnabled
private static final long	serialVersionUID
private final org.apache.hadoop.security.UserGroupInformation	serviceUGI

Constructor Summary

Constructors

Constructor	Description
ThriftHttpServlet(org.apache.thrift.TProcessor processor, org.apache.thrift.protocol.TProtocolFactory protocolFactory, org.apache.hadoop.security.UserGroupInformation serviceUGI, org.apache.hadoop.security.UserGroupInformation httpUGI, HBaseServiceHandler handler, boolean securityEnabled, boolean doAsEnabled)

Method Summary

Modifier and Type	Method	Description
private ThriftHttpServlet.RemoteUserIdentity	doKerberosAuth(javax.servlet.http.HttpServletRequest request)	Do the GSS-API kerberos authentication.
protected void	doPost(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response)

Methods inherited from class org.apache.thrift.server.TServlet

addCustomHeader, doGet, setCustomHeaders

Methods inherited from class javax.servlet.http.HttpServlet

doDelete, doHead, doOptions, doPut, doTrace, getLastModified, service, service

Methods inherited from class javax.servlet.GenericServlet

destroy, getInitParameter, getInitParameterNames, getServletConfig, getServletContext, getServletInfo, getServletName, init, init, log, log

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

serialVersionUID

private static final long serialVersionUID

See Also:

• Constant Field Values

LOG

private static final org.slf4j.Logger LOG

serviceUGI

private final transient org.apache.hadoop.security.UserGroupInformation serviceUGI

httpUGI

private final transient org.apache.hadoop.security.UserGroupInformation httpUGI

handler

private final transient HBaseServiceHandler handler

doAsEnabled

private final boolean doAsEnabled

securityEnabled

private final boolean securityEnabled

NEGOTIATE

public static final String NEGOTIATE

See Also:

• Constant Field Values

Constructor Details

ThriftHttpServlet

public ThriftHttpServlet(org.apache.thrift.TProcessor processor,
 org.apache.thrift.protocol.TProtocolFactory protocolFactory,
 org.apache.hadoop.security.UserGroupInformation serviceUGI,
 org.apache.hadoop.security.UserGroupInformation httpUGI,
 HBaseServiceHandler handler,
 boolean securityEnabled,
 boolean doAsEnabled)

Method Details

doPost

protected void doPost(javax.servlet.http.HttpServletRequest request,
 javax.servlet.http.HttpServletResponse response)
               throws javax.servlet.ServletException,
IOException

Overrides:

doPost in class org.apache.thrift.server.TServlet

Throws:

javax.servlet.ServletException

IOException

doKerberosAuth

private ThriftHttpServlet.RemoteUserIdentity doKerberosAuth(javax.servlet.http.HttpServletRequest request)
                                                     throws HttpAuthenticationException

Do the GSS-API kerberos authentication. We already have a logged in subject in the form of httpUGI, which GSS-API will extract information from.

Throws:

HttpAuthenticationException