org.apache.accumulo.server.security.handler

Class KerberosAuthorizor

java.lang.Object

org.apache.accumulo.server.security.handler.KerberosAuthorizor

All Implemented Interfaces:

Authorizor

public class KerberosAuthorizor
extends Object
implements Authorizor

Kerberos principals might contains identifiers that are not valid ZNodes ('/'). Base64-encodes the principals before interacting with ZooKeeper.

Constructor Summary

Constructors

Constructor and Description
KerberosAuthorizor()

Method Summary

Methods

Modifier and Type	Method and Description
void	changeAuthorizations(String user, Authorizations authorizations) Used to change the authorizations for the user
void	dropUser(String user) Deletes a user
Authorizations	getCachedUserAuthorizations(String user) Used to get the authorizations for the user
void	initialize(String instanceId, boolean initialize) Sets up the authorizor for a new instance of Accumulo
void	initializeSecurity(TCredentials credentials, String rootuser) Used to initialize security for the root user
void	initUser(String user) Initializes a new user
boolean	isValidAuthorizations(String user, List<ByteBuffer> list) Used to check if a user has valid auths.
boolean	validSecurityHandlers(Authenticator auth, PermissionHandler pm) Used to validate that the Authorizor, Authenticator, and permission handler can coexist

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

KerberosAuthorizor

public KerberosAuthorizor()

Method Detail

initialize

public void initialize(String instanceId,
              boolean initialize)

Description copied from interface: Authorizor

Sets up the authorizor for a new instance of Accumulo

Specified by:

initialize in interface Authorizor

validSecurityHandlers

public boolean validSecurityHandlers(Authenticator auth,
                            PermissionHandler pm)

Description copied from interface: Authorizor

Used to validate that the Authorizor, Authenticator, and permission handler can coexist

Specified by:

validSecurityHandlers in interface Authorizor

initializeSecurity

public void initializeSecurity(TCredentials credentials,
                      String rootuser)
                        throws AccumuloSecurityException,
                               ThriftSecurityException

Description copied from interface: Authorizor

Used to initialize security for the root user

Specified by:

initializeSecurity in interface Authorizor

Throws:

AccumuloSecurityException

ThriftSecurityException

changeAuthorizations

public void changeAuthorizations(String user,
                        Authorizations authorizations)
                          throws AccumuloSecurityException

Description copied from interface: Authorizor

Used to change the authorizations for the user

Specified by:

changeAuthorizations in interface Authorizor

Throws:

AccumuloSecurityException

getCachedUserAuthorizations

public Authorizations getCachedUserAuthorizations(String user)
                                           throws AccumuloSecurityException

Description copied from interface: Authorizor

Used to get the authorizations for the user

Specified by:

getCachedUserAuthorizations in interface Authorizor

Throws:

AccumuloSecurityException

isValidAuthorizations

public boolean isValidAuthorizations(String user,
                            List<ByteBuffer> list)
                              throws AccumuloSecurityException

Description copied from interface: Authorizor

Used to check if a user has valid auths.

Specified by:

isValidAuthorizations in interface Authorizor

Throws:

AccumuloSecurityException

initUser

public void initUser(String user)
              throws AccumuloSecurityException

Description copied from interface: Authorizor

Initializes a new user

Specified by:

initUser in interface Authorizor

Throws:

AccumuloSecurityException

dropUser

public void dropUser(String user)
              throws AccumuloSecurityException

Description copied from interface: Authorizor

Deletes a user

Specified by:

dropUser in interface Authorizor

Throws:

AccumuloSecurityException