org.apache.oozie.service

Class ProxyUserService

java.lang.Object

org.apache.oozie.service.ProxyUserService

All Implemented Interfaces:

Service

public class ProxyUserService
extends java.lang.Object
implements Service

The ProxyUserService checks if a user of a request has proxyuser privileges.

This check is based on the following criteria:

• The user of the request must be configured as proxy user in Oozie configuration.
• The user of the request must be making the request from a whitelisted host.
• The user of the request must be making the request on behalf of a user of a whitelisted group.

Field Summary

Fields

Modifier and Type	Field and Description
static java.lang.String	CONF_PREFIX
static java.lang.String	GROUPS
static java.lang.String	HOSTS

Fields inherited from interface org.apache.oozie.service.Service

DEFAULT_LOCK_TIMEOUT, lockTimeout

Constructor Summary

Constructors

Constructor and Description
ProxyUserService()

Method Summary

Methods

Modifier and Type	Method and Description
void	destroy() Destroys the service.
java.lang.Class<? extends Service>	getInterface() Returns the service interface.
void	init(Services services) Initializes the service.
void	validate(java.lang.String proxyUser, java.lang.String proxyHost, java.lang.String doAsUser) Verifies a proxyuser.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

CONF_PREFIX

public static final java.lang.String CONF_PREFIX

See Also:

Constant Field Values

GROUPS

public static final java.lang.String GROUPS

See Also:

Constant Field Values

HOSTS

public static final java.lang.String HOSTS

See Also:

Constant Field Values

Constructor Detail

ProxyUserService

public ProxyUserService()

Method Detail

getInterface

public java.lang.Class<? extends Service> getInterface()

Returns the service interface.

Specified by:

getInterface in interface Service

Returns:

ProxyUserService

init

public void init(Services services)
          throws ServiceException

Initializes the service.

Specified by:

init in interface Service

Parameters:

services - services singleton initializing the service.

Throws:

ServiceException - thrown if the service could not be configured correctly.

validate

public void validate(java.lang.String proxyUser,
            java.lang.String proxyHost,
            java.lang.String doAsUser)
              throws java.io.IOException,
                     java.security.AccessControlException

Verifies a proxyuser.

Parameters:

proxyUser - user name of the proxy user.

proxyHost - host the proxy user is making the request from.

doAsUser - user the proxy user is impersonating.

Throws:

java.io.IOException - thrown if an error during the validation has occurred.

java.security.AccessControlException - thrown if the user is not allowed to perform the proxyuser request.

destroy

public void destroy()

Destroys the service.

Specified by:

destroy in interface Service