com.bigstep.datalake

Class KerberosIdentityAuthenticator

java.lang.Object

com.bigstep.datalake.KerberosIdentityAuthenticator

All Implemented Interfaces:

org.apache.hadoop.security.authentication.client.Authenticator

public class KerberosIdentityAuthenticator
extends Object
implements org.apache.hadoop.security.authentication.client.Authenticator

The KerberosAuthenticator implements the Kerberos SPNEGO authentication sequence.

It uses the default principal for the Kerberos cache (normally set via kinit).

It falls back to the PseudoAuthenticator if the HTTP endpoint does not trigger an SPNEGO authentication sequence.

Field Summary

Fields

Modifier and Type	Field and Description
static String	AUTHORIZATION HTTP header used by the SPNEGO client endpoint during an authentication sequence.
static String	NEGOTIATE HTTP header prefix used by the SPNEGO client/server endpoints during an authentication sequence.
static String	WWW_AUTHENTICATE HTTP header used by the SPNEGO server endpoint during an authentication sequence.

Constructor Summary

Constructors

Constructor and Description
KerberosIdentityAuthenticator(KerberosIdentity identity)

Method Summary

Methods

Modifier and Type	Method and Description
void	authenticate(URL url, org.apache.hadoop.security.authentication.client.AuthenticatedURL.Token token) Performs SPNEGO authentication against the specified URL.
protected org.apache.hadoop.security.authentication.client.Authenticator	getFallBackAuthenticator() If the specified URL does not support SPNEGO authentication, a fallback Authenticator will be used.
void	setConnectionConfigurator(org.apache.hadoop.security.authentication.client.ConnectionConfigurator configurator) Sets a ConnectionConfigurator instance to use for configuring connections.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

WWW_AUTHENTICATE

public static final String WWW_AUTHENTICATE

HTTP header used by the SPNEGO server endpoint during an authentication sequence.

See Also:

Constant Field Values

AUTHORIZATION

public static final String AUTHORIZATION

HTTP header used by the SPNEGO client endpoint during an authentication sequence.

See Also:

Constant Field Values

NEGOTIATE

public static final String NEGOTIATE

HTTP header prefix used by the SPNEGO client/server endpoints during an authentication sequence.

See Also:

Constant Field Values

Constructor Detail

KerberosIdentityAuthenticator

public KerberosIdentityAuthenticator(KerberosIdentity identity)

Method Detail

setConnectionConfigurator

public void setConnectionConfigurator(org.apache.hadoop.security.authentication.client.ConnectionConfigurator configurator)

Sets a ConnectionConfigurator instance to use for configuring connections.

Specified by:

setConnectionConfigurator in interface org.apache.hadoop.security.authentication.client.Authenticator

Parameters:

configurator - the ConnectionConfigurator instance.

authenticate

public void authenticate(URL url,
                org.apache.hadoop.security.authentication.client.AuthenticatedURL.Token token)
                  throws IOException,
                         org.apache.hadoop.security.authentication.client.AuthenticationException

Performs SPNEGO authentication against the specified URL.

If a token is given it does a NOP and returns the given token.

If no token is given, it will perform the SPNEGO authentication sequence using an HTTP OPTIONS request.

Specified by:

authenticate in interface org.apache.hadoop.security.authentication.client.Authenticator

Parameters:

url - the URl to authenticate against.

token - the authentication token being used for the user.

Throws:

IOException - if an IO error occurred.

org.apache.hadoop.security.authentication.client.AuthenticationException - if an authentication error occurred.

getFallBackAuthenticator

protected org.apache.hadoop.security.authentication.client.Authenticator getFallBackAuthenticator()

If the specified URL does not support SPNEGO authentication, a fallback Authenticator will be used.

This implementation returns a PseudoAuthenticator.

Returns:

the fallback Authenticator.