Package org.apache.hadoop.hbase.security

Class HBaseKerberosUtils

java.lang.Object

org.apache.hadoop.hbase.security.HBaseKerberosUtils

@Private
public final class HBaseKerberosUtils
extends Object

Field Summary

Fields

Modifier and Type	Field	Description
static final String	CLIENT_KEYTAB
static final String	CLIENT_PRINCIPAL
static final String	KRB_KEYTAB_FILE
static final String	KRB_PRINCIPAL
private static final org.slf4j.Logger	LOG
static final String	MASTER_KRB_PRINCIPAL

Constructor Summary

Constructors

Modifier	Constructor	Description
private	HBaseKerberosUtils()

Method Summary

Modifier and Type	Method	Description
static String	getClientKeytabForTesting()
static String	getClientPrincipalForTesting()
static org.apache.hadoop.conf.Configuration	getConfigurationWoPrincipal()
static String	getKeytabFileForTesting()
static String	getPrincipalForTesting()
static org.apache.hadoop.conf.Configuration	getSecuredConfiguration()
static boolean	isKerberosPropertySetted()
static org.apache.hadoop.security.UserGroupInformation	loginAndReturnUGI(org.apache.hadoop.conf.Configuration conf, String username)
static org.apache.hadoop.security.UserGroupInformation	loginKerberosPrincipal(String krbKeytab, String krbPrincipal)
static void	setClientKeytabForTesting(String clientKeytab)
static void	setClientPrincipalForTesting(String clientPrincipal)
static void	setKeytabFileForTesting(String keytabFile)
static void	setPrincipalForTesting(String principal)
static void	setSecuredConfiguration(org.apache.hadoop.conf.Configuration conf)
static void	setSecuredConfiguration(org.apache.hadoop.conf.Configuration conf, String servicePrincipal, String spnegoPrincipal)	Set up configuration for a secure HDFS+HBase cluster.
private static void	setSecuredHadoopConfiguration(org.apache.hadoop.conf.Configuration conf, String spnegoServerPrincipal)
static void	setSSLConfiguration(HBaseCommonTestingUtility utility, Class<?> clazz)	Set up SSL configuration for HDFS NameNode and DataNode.
static void	setSystemProperty(String propertyName, String propertyValue)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

LOG

private static final org.slf4j.Logger LOG

KRB_PRINCIPAL

public static final String KRB_PRINCIPAL

See Also:

• Constant Field Values

MASTER_KRB_PRINCIPAL

public static final String MASTER_KRB_PRINCIPAL

See Also:

• Constant Field Values

KRB_KEYTAB_FILE

public static final String KRB_KEYTAB_FILE

See Also:

• Constant Field Values

CLIENT_PRINCIPAL

public static final String CLIENT_PRINCIPAL

See Also:

• Constant Field Values

CLIENT_KEYTAB

public static final String CLIENT_KEYTAB

See Also:

• Constant Field Values

Constructor Details

HBaseKerberosUtils

private HBaseKerberosUtils()

Method Details

isKerberosPropertySetted

public static boolean isKerberosPropertySetted()

setPrincipalForTesting

public static void setPrincipalForTesting(String principal)

setKeytabFileForTesting

public static void setKeytabFileForTesting(String keytabFile)

setClientPrincipalForTesting

public static void setClientPrincipalForTesting(String clientPrincipal)

setClientKeytabForTesting

public static void setClientKeytabForTesting(String clientKeytab)

setSystemProperty

public static void setSystemProperty(String propertyName,
 String propertyValue)

getKeytabFileForTesting

public static String getKeytabFileForTesting()

getPrincipalForTesting

public static String getPrincipalForTesting()

getClientPrincipalForTesting

public static String getClientPrincipalForTesting()

getClientKeytabForTesting

public static String getClientKeytabForTesting()

getConfigurationWoPrincipal

public static org.apache.hadoop.conf.Configuration getConfigurationWoPrincipal()

getSecuredConfiguration

public static org.apache.hadoop.conf.Configuration getSecuredConfiguration()

setSecuredConfiguration

public static void setSecuredConfiguration(org.apache.hadoop.conf.Configuration conf,
 String servicePrincipal,
 String spnegoPrincipal)

Set up configuration for a secure HDFS+HBase cluster.

Parameters:

conf - configuration object.

servicePrincipal - service principal used by NN, HM and RS.

spnegoPrincipal - SPNEGO principal used by NN web UI.

setSecuredConfiguration

public static void setSecuredConfiguration(org.apache.hadoop.conf.Configuration conf)

setSecuredHadoopConfiguration

private static void setSecuredHadoopConfiguration(org.apache.hadoop.conf.Configuration conf,
 String spnegoServerPrincipal)

setSSLConfiguration

public static void setSSLConfiguration(HBaseCommonTestingUtility utility,
 Class<?> clazz)
                                throws Exception

Set up SSL configuration for HDFS NameNode and DataNode.

Parameters:

utility - a HBaseTestingUtility object.

clazz - the caller test class.

Throws:

Exception - if unable to set up SSL configuration

loginAndReturnUGI

public static org.apache.hadoop.security.UserGroupInformation loginAndReturnUGI(org.apache.hadoop.conf.Configuration conf,
 String username)
                                                                         throws IOException

Throws:

IOException

loginKerberosPrincipal

public static org.apache.hadoop.security.UserGroupInformation loginKerberosPrincipal(String krbKeytab,
 String krbPrincipal)
                                                                              throws Exception

Throws:

Exception