io.druid.security.kerberos

Class DruidKerberosUtil

java.lang.Object

io.druid.security.kerberos.DruidKerberosUtil

public class DruidKerberosUtil
extends Object

Constructor Summary

Constructors

Constructor and Description
DruidKerberosUtil()

Method Summary

Modifier and Type	Method and Description
static void	authenticateIfRequired(String internalClientPrincipal, String internalClientKeytab)
static HttpCookie	getAuthCookie(CookieStore cookieStore, URI uri)
static String	kerberosChallenge(String server) This method always needs to be called within a doAs block so that the client's TGT credentials can be read from the Subject.
static boolean	needToSendCredentials(CookieStore cookieStore, URI uri)
static void	removeAuthCookie(CookieStore cookieStore, URI uri)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DruidKerberosUtil

public DruidKerberosUtil()

Method Detail

kerberosChallenge

public static String kerberosChallenge(String server)
                                throws org.apache.hadoop.security.authentication.client.AuthenticationException

This method always needs to be called within a doAs block so that the client's TGT credentials can be read from the Subject.

Returns:

Kerberos Challenge String

Throws:

Exception

org.apache.hadoop.security.authentication.client.AuthenticationException

authenticateIfRequired

public static void authenticateIfRequired(String internalClientPrincipal,
                                          String internalClientKeytab)
                                   throws IOException

Throws:

IOException

needToSendCredentials

public static boolean needToSendCredentials(CookieStore cookieStore,
                                            URI uri)

getAuthCookie

public static HttpCookie getAuthCookie(CookieStore cookieStore,
                                       URI uri)

removeAuthCookie

public static void removeAuthCookie(CookieStore cookieStore,
                                    URI uri)