org.apache.nifi.security.krb

Class KerberosKeytabUser

java.lang.Object

org.apache.nifi.security.krb.AbstractKerberosUser

org.apache.nifi.security.krb.KerberosKeytabUser

All Implemented Interfaces:

KerberosUser

public class KerberosKeytabUser
extends AbstractKerberosUser

Used to authenticate and execute actions when Kerberos is enabled and a keytab is being used. Some of the functionality in this class is adapted from Hadoop's UserGroupInformation.

Field Summary

Fields

Modifier and Type	Field and Description
private String	keytabFile

Fields inherited from class org.apache.nifi.security.krb.AbstractKerberosUser

DATE_FORMAT, loggedIn, loginContext, principal, subject, TICKET_RENEW_WINDOW

Constructor Summary

Constructors

Constructor and Description
KerberosKeytabUser(String principal, String keytabFile)

Method Summary

Modifier and Type	Method and Description
protected LoginContext	createLoginContext(Subject subject)
String	getKeytabFile()
(package private) Subject	getSubject()

Methods inherited from class org.apache.nifi.security.krb.AbstractKerberosUser

checkTGTAndRelogin, doAs, doAs, getPrincipal, isLoggedIn, login, logout

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

keytabFile

private final String keytabFile

Constructor Detail

KerberosKeytabUser

public KerberosKeytabUser(String principal,
                          String keytabFile)

Method Detail

createLoginContext

protected LoginContext createLoginContext(Subject subject)
                                   throws LoginException

Specified by:

createLoginContext in class AbstractKerberosUser

Throws:

LoginException

getKeytabFile

public String getKeytabFile()

Returns:

the keytab file for this user

getSubject

Subject getSubject()

Overrides:

getSubject in class AbstractKerberosUser