org.apache.hadoop.yarn.server.timeline.security

Class TimelineClientAuthenticationService

java.lang.Object

org.apache.hadoop.security.authentication.server.KerberosAuthenticationHandler

org.apache.hadoop.yarn.server.timeline.security.TimelineClientAuthenticationService

All Implemented Interfaces:

org.apache.hadoop.security.authentication.server.AuthenticationHandler

@InterfaceAudience.Private
@InterfaceStability.Unstable
public class TimelineClientAuthenticationService
extends org.apache.hadoop.security.authentication.server.KerberosAuthenticationHandler

Server side AuthenticationHandler that authenticates requests using the incoming delegation token as a 'delegation' query string parameter.

If not delegation token is present in the request it delegates to the KerberosAuthenticationHandler

Field Summary

Fields

Modifier and Type	Field and Description
static String	TYPE

Fields inherited from class org.apache.hadoop.security.authentication.server.KerberosAuthenticationHandler

KEYTAB, NAME_RULES, PRINCIPAL

Constructor Summary

Constructors

Constructor and Description
TimelineClientAuthenticationService()

Method Summary

Methods

Modifier and Type	Method and Description
org.apache.hadoop.security.authentication.server.AuthenticationToken	authenticate(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response) Authenticates a request looking for the delegation query-string parameter and verifying it is a valid token.
String	getType() Returns authentication type of the handler.
boolean	managementOperation(org.apache.hadoop.security.authentication.server.AuthenticationToken token, javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response)

Methods inherited from class org.apache.hadoop.security.authentication.server.KerberosAuthenticationHandler

destroy, getKeytab, getPrincipals, init

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

TYPE

public static final String TYPE

See Also:

Constant Field Values

Constructor Detail

TimelineClientAuthenticationService

public TimelineClientAuthenticationService()

Method Detail

getType

public String getType()

Returns authentication type of the handler.

Specified by:

getType in interface org.apache.hadoop.security.authentication.server.AuthenticationHandler

Overrides:

getType in class org.apache.hadoop.security.authentication.server.KerberosAuthenticationHandler

Returns:

delegationtoken-kerberos

managementOperation

public boolean managementOperation(org.apache.hadoop.security.authentication.server.AuthenticationToken token,
                          javax.servlet.http.HttpServletRequest request,
                          javax.servlet.http.HttpServletResponse response)
                            throws IOException,
                                   org.apache.hadoop.security.authentication.client.AuthenticationException

Specified by:

managementOperation in interface org.apache.hadoop.security.authentication.server.AuthenticationHandler

Overrides:

managementOperation in class org.apache.hadoop.security.authentication.server.KerberosAuthenticationHandler

Throws:

IOException

org.apache.hadoop.security.authentication.client.AuthenticationException

authenticate

public org.apache.hadoop.security.authentication.server.AuthenticationToken authenticate(javax.servlet.http.HttpServletRequest request,
                                                                                javax.servlet.http.HttpServletResponse response)
                                                                                  throws IOException,
                                                                                         org.apache.hadoop.security.authentication.client.AuthenticationException

Authenticates a request looking for the delegation query-string parameter and verifying it is a valid token. If there is not delegation query-string parameter, it delegates the authentication to the KerberosAuthenticationHandler unless it is disabled.

Specified by:

authenticate in interface org.apache.hadoop.security.authentication.server.AuthenticationHandler

Overrides:

authenticate in class org.apache.hadoop.security.authentication.server.KerberosAuthenticationHandler

Parameters:

request - the HTTP client request.

response - the HTTP client response.

Returns:

the authentication token for the authenticated request.

Throws:

IOException - thrown if an IO error occurred.

org.apache.hadoop.security.authentication.client.AuthenticationException - thrown if the authentication failed.