io.druid.security.kerberos

Class KerberosEscalator

java.lang.Object

io.druid.security.kerberos.KerberosEscalator

All Implemented Interfaces:

Escalator

public class KerberosEscalator
extends Object
implements Escalator

Constructor Summary

Constructors

Constructor and Description
KerberosEscalator(String authorizerName, String internalClientPrincipal, String internalClientKeytab)

Method Summary

Modifier and Type	Method and Description
AuthenticationResult	createEscalatedAuthenticationResult()
HttpClient	createEscalatedClient(HttpClient baseClient) Return a client that sends requests with the format/information necessary to authenticate successfully against this Escalator's authentication scheme using the identity of the internal system user.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

KerberosEscalator

public KerberosEscalator(String authorizerName,
                         String internalClientPrincipal,
                         String internalClientKeytab)

Method Detail

createEscalatedClient

public HttpClient createEscalatedClient(HttpClient baseClient)

Description copied from interface: Escalator

Return a client that sends requests with the format/information necessary to authenticate successfully against this Escalator's authentication scheme using the identity of the internal system user.

This HTTP client is used for internal communications between Druid nodes, such as when a broker communicates with a historical node during query processing.

Specified by:

createEscalatedClient in interface Escalator

Parameters:

baseClient - Base HTTP client for internal Druid communications

Returns:

metamx HttpClient that sends requests with the credentials of the internal system user

createEscalatedAuthenticationResult

public AuthenticationResult createEscalatedAuthenticationResult()

Specified by:

createEscalatedAuthenticationResult in interface Escalator

Returns:

an AuthenticationResult representing the identity of the internal system user.