org.hbase.async.auth

Class KerberosClientAuthProvider

java.lang.Object

org.hbase.async.auth.ClientAuthProvider

org.hbase.async.auth.KerberosClientAuthProvider

public class KerberosClientAuthProvider
extends ClientAuthProvider

Handles Kerberos based authentication using the Java Authentication and Authorization Service (JAAS). The class requires a few settings including: asynchbase.security.auth.kerberos.regionserver.principal - a principal name or template to use for authentication. The value can have the token "_HOST" which will be replaced with the cannonical name of the localhost.

Since:

1.7

Field Summary

Fields

Modifier and Type	Field and Description
static String	PASSWORD_KEY
static String	PRINCIPAL_KEY

Fields inherited from class org.hbase.async.auth.ClientAuthProvider

KEBEROS_CLIENT_AUTH_CODE, SIMPLE_CLIENT_AUTH_CODE

Constructor Summary

Constructors

Constructor and Description
KerberosClientAuthProvider(HBaseClient hbase_client) Default ctor that will attempt a login and setup the Login singleton

Method Summary

Methods

Modifier and Type	Method and Description
byte	getAuthMethodCode()
Subject	getClientSubject()
String	getClientUsername()
SaslClient	newSaslClient(String service_ip, Map<String,String> props) Return a new SaslClient for target serviceIP host.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

PASSWORD_KEY

public static final String PASSWORD_KEY

See Also:

Constant Field Values

PRINCIPAL_KEY

public static final String PRINCIPAL_KEY

See Also:

Constant Field Values

Constructor Detail

KerberosClientAuthProvider

public KerberosClientAuthProvider(HBaseClient hbase_client)

Default ctor that will attempt a login and setup the Login singleton

Parameters:

hbase_client - The HBaseClient to fetch configuration and timers from

Throws:

IllegalArgumentException - if the asynchbase.security.auth.simple.username is missing, null or empty.

IllegalStateException - if the login was unsuccessful

Method Detail

newSaslClient

public SaslClient newSaslClient(String service_ip,
                       Map<String,String> props)

Description copied from class: ClientAuthProvider

Return a new SaslClient for target serviceIP host. Properties passed are expected to be passed as part of the newSaslClient props parameter.

Specified by:

newSaslClient in class ClientAuthProvider

Parameters:

service_ip - The IP of the target host.

props - The set of properties with which to create a new client.

Returns:

the newly-created client.

getClientUsername

public String getClientUsername()

Specified by:

getClientUsername in class ClientAuthProvider

Returns:

The name of the user this provider is tied to.

getAuthMethodCode

public byte getAuthMethodCode()

Specified by:

getAuthMethodCode in class ClientAuthProvider

Returns:

The RPC code identifying this authentication mechanism

getClientSubject

public Subject getClientSubject()

Specified by:

getClientSubject in class ClientAuthProvider

Returns:

The subject identifying the client user this provider is tied to.