Package org.apache.hadoop.hbase.http

Class TestProxyUserSpnegoHttpServer

java.lang.Object

org.apache.hadoop.hbase.http.HttpServerFunctionalTest

org.apache.hadoop.hbase.http.TestProxyUserSpnegoHttpServer

@Tag("org.apache.hadoop.hbase.testclassification.MiscTests") @Tag("org.apache.hadoop.hbase.testclassification.SmallTests")
public class TestProxyUserSpnegoHttpServer
extends HttpServerFunctionalTest

Test class for SPNEGO Proxyuser authentication on the HttpServer. Uses Kerby's MiniKDC and Apache HttpComponents to verify that the doas= mechanicsm works, and that the proxyuser settings are observed.

Field Summary

Fields

Modifier and Type	Field	Description
private static URL	baseUrl
private static File	infoServerKeytab
private static org.apache.kerby.kerberos.kerb.server.SimpleKdcServer	kdc
private static final String	KDC_SERVER_HOST
private static final org.slf4j.Logger	LOG
private static final String	PRIVILEGED_PRINCIPAL
private static final String	PRIVILEGED2_PRINCIPAL
private static File	privileged2Keytab
private static File	privilegedKeytab
private static org.apache.hadoop.hbase.http.HttpServer	server
private static final String	UNPRIVILEGED_PRINCIPAL
private static File	unprivilegedKeytab
private static final String	WHEEL_PRINCIPAL
private static File	wheelKeytab

Fields inherited from class org.apache.hadoop.hbase.http.HttpServerFunctionalTest

TEST_BUILD_WEBAPPS

Constructor Summary

Constructors

Constructor	Description
TestProxyUserSpnegoHttpServer()

Method Summary

Modifier and Type	Method	Description
protected static org.apache.hadoop.conf.Configuration	buildSpnegoConfiguration(org.apache.hadoop.conf.Configuration conf, String serverPrincipal, File serverKeytab)
static void	setupServer()
private static void	setupUser(org.apache.kerby.kerberos.kerb.server.SimpleKdcServer kdc, File keytab, String principal)
static void	stopServer()
void	testProxy(String clientPrincipal, String doAs, int responseCode, String statusLine)
void	testProxyAllowed()
void	testProxyDisallowedForNotSudoAble()
void	testProxyDisallowedForUnprivileged()

Methods inherited from class org.apache.hadoop.hbase.http.HttpServerFunctionalTest

access, createAndStartTestServer, createServer, createServer, createServer, createServer, createServer, createTestServer, createTestServer, createTestServer, createTestServer, createTestServerWithSecurity, createTestServerWithSecurityAndAcl, deleteRecursively, getFreePort, getServerURL, prepareTestWebapp, readOutput, stop

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

LOG

private static final org.slf4j.Logger LOG

KDC_SERVER_HOST

private static final String KDC_SERVER_HOST

See Also:

• Constant Field Values

WHEEL_PRINCIPAL

private static final String WHEEL_PRINCIPAL

See Also:

• Constant Field Values

UNPRIVILEGED_PRINCIPAL

private static final String UNPRIVILEGED_PRINCIPAL

See Also:

• Constant Field Values

PRIVILEGED_PRINCIPAL

private static final String PRIVILEGED_PRINCIPAL

See Also:

• Constant Field Values

PRIVILEGED2_PRINCIPAL

private static final String PRIVILEGED2_PRINCIPAL

See Also:

• Constant Field Values

server

private static org.apache.hadoop.hbase.http.HttpServer server

baseUrl

private static URL baseUrl

kdc

private static org.apache.kerby.kerberos.kerb.server.SimpleKdcServer kdc

infoServerKeytab

private static File infoServerKeytab

wheelKeytab

private static File wheelKeytab

unprivilegedKeytab

private static File unprivilegedKeytab

privilegedKeytab

private static File privilegedKeytab

privileged2Keytab

private static File privileged2Keytab

Constructor Details

TestProxyUserSpnegoHttpServer

public TestProxyUserSpnegoHttpServer()

Method Details

setupServer

@BeforeAll
public static void setupServer()
                        throws Exception

Throws:

Exception

stopServer

@AfterAll
public static void stopServer()
                       throws Exception

Throws:

Exception

setupUser

private static void setupUser(org.apache.kerby.kerberos.kerb.server.SimpleKdcServer kdc,
 File keytab,
 String principal)
                       throws org.apache.kerby.kerberos.kerb.KrbException

Throws:

org.apache.kerby.kerberos.kerb.KrbException

buildSpnegoConfiguration

protected static org.apache.hadoop.conf.Configuration buildSpnegoConfiguration(org.apache.hadoop.conf.Configuration conf,
 String serverPrincipal,
 File serverKeytab)

testProxyAllowed

@Test
public void testProxyAllowed()
                      throws Exception

Throws:

Exception

testProxyDisallowedForUnprivileged

@Test
public void testProxyDisallowedForUnprivileged()
                                        throws Exception

Throws:

Exception

testProxyDisallowedForNotSudoAble

@Test
public void testProxyDisallowedForNotSudoAble()
                                       throws Exception

Throws:

Exception

testProxy

public void testProxy(String clientPrincipal,
 String doAs,
 int responseCode,
 String statusLine)
               throws Exception

Throws:

Exception