Examples with AuthenticationMethod org.apache.hadoop.security.UserGroupInformation.AuthenticationMethod used on opensource projects

Example 6 with AuthenticationMethod

use of org.apache.hadoop.security.UserGroupInformation.AuthenticationMethod in project hbase by apache.

the class TokenProvider method whoAmI.

@Override
public void whoAmI(RpcController controller, AuthenticationProtos.WhoAmIRequest request, RpcCallback<AuthenticationProtos.WhoAmIResponse> done) {
    User requestUser = RpcServer.getRequestUser();
    AuthenticationProtos.WhoAmIResponse.Builder response = AuthenticationProtos.WhoAmIResponse.newBuilder();
    if (requestUser != null) {
        response.setUsername(requestUser.getShortName());
        AuthenticationMethod method = requestUser.getUGI().getAuthenticationMethod();
        if (method != null) {
            response.setAuthMethod(method.name());
        }
    }
    done.run(response.build());
}

Example 7 with AuthenticationMethod

use of org.apache.hadoop.security.UserGroupInformation.AuthenticationMethod in project hadoop by apache.

the class TestRMAppTransitions method setUp.

@Before
public void setUp() throws Exception {
    conf = new YarnConfiguration();
    AuthenticationMethod authMethod = AuthenticationMethod.SIMPLE;
    if (isSecurityEnabled) {
        authMethod = AuthenticationMethod.KERBEROS;
    }
    SecurityUtil.setAuthenticationMethod(authMethod, conf);
    UserGroupInformation.setConfiguration(conf);
    rmDispatcher = new DrainDispatcher();
    ContainerAllocationExpirer containerAllocationExpirer = mock(ContainerAllocationExpirer.class);
    AMLivelinessMonitor amLivelinessMonitor = mock(AMLivelinessMonitor.class);
    AMLivelinessMonitor amFinishingMonitor = mock(AMLivelinessMonitor.class);
    store = mock(RMStateStore.class);
    writer = mock(RMApplicationHistoryWriter.class);
    DelegationTokenRenewer renewer = mock(DelegationTokenRenewer.class);
    RMContext realRMContext = new RMContextImpl(rmDispatcher, containerAllocationExpirer, amLivelinessMonitor, amFinishingMonitor, renewer, new AMRMTokenSecretManager(conf, this.rmContext), new RMContainerTokenSecretManager(conf), new NMTokenSecretManagerInRM(conf), new ClientToAMTokenSecretManagerInRM());
    ((RMContextImpl) realRMContext).setStateStore(store);
    publisher = mock(SystemMetricsPublisher.class);
    realRMContext.setSystemMetricsPublisher(publisher);
    realRMContext.setRMApplicationHistoryWriter(writer);
    this.rmContext = spy(realRMContext);
    ResourceScheduler resourceScheduler = mock(ResourceScheduler.class);
    doReturn(null).when(resourceScheduler).getAppResourceUsageReport((ApplicationAttemptId) Matchers.any());
    doReturn(resourceScheduler).when(rmContext).getScheduler();
    doReturn(mock(RMTimelineCollectorManager.class)).when(rmContext).getRMTimelineCollectorManager();
    rmDispatcher.register(RMAppAttemptEventType.class, new TestApplicationAttemptEventDispatcher(this.rmContext));
    rmDispatcher.register(RMAppEventType.class, new TestApplicationEventDispatcher(rmContext));
    rmDispatcher.register(RMAppManagerEventType.class, new TestApplicationManagerEventDispatcher());
    schedulerDispatcher = new TestSchedulerEventDispatcher();
    rmDispatcher.register(SchedulerEventType.class, schedulerDispatcher);
    rmDispatcher.init(conf);
    rmDispatcher.start();
}

Example 8 with AuthenticationMethod

use of org.apache.hadoop.security.UserGroupInformation.AuthenticationMethod in project zeppelin by apache.

the class JDBCSecurityImpl method createSecureConfiguration.

/***
   * @param properties
   */
public static void createSecureConfiguration(Properties properties) {
    AuthenticationMethod authType = getAuthtype(properties);
    switch(authType) {
        case KERBEROS:
            Configuration conf = new org.apache.hadoop.conf.Configuration();
            conf.set("hadoop.security.authentication", KERBEROS.toString());
            UserGroupInformation.setConfiguration(conf);
            try {
                UserGroupInformation.loginUserFromKeytab(properties.getProperty("zeppelin.jdbc.principal"), properties.getProperty("zeppelin.jdbc.keytab.location"));
            } catch (IOException e) {
                LOGGER.error("Failed to get either keytab location or principal name in the " + "interpreter", e);
            }
    }
}

Example 9 with AuthenticationMethod

use of org.apache.hadoop.security.UserGroupInformation.AuthenticationMethod in project hive by apache.

the class HadoopThriftAuthBridge method loginUserHasCurrentAuthMethod.

/**
   * Return true if the current login user is already using the given authMethod.
   *
   * Used above to ensure we do not create a new Configuration object and as such
   * lose other settings such as the cluster to which the JVM is connected. Required
   * for oozie since it does not have a core-site.xml see HIVE-7682
   */
private boolean loginUserHasCurrentAuthMethod(UserGroupInformation ugi, String sAuthMethod) {
    AuthenticationMethod authMethod;
    try {
        // based on SecurityUtil.getAuthenticationMethod()
        authMethod = Enum.valueOf(AuthenticationMethod.class, sAuthMethod.toUpperCase(Locale.ENGLISH));
    } catch (IllegalArgumentException iae) {
        throw new IllegalArgumentException("Invalid attribute value for " + HADOOP_SECURITY_AUTHENTICATION + " of " + sAuthMethod, iae);
    }
    LOG.debug("Current authMethod = " + ugi.getAuthenticationMethod());
    return ugi.getAuthenticationMethod().equals(authMethod);
}

Example 10 with AuthenticationMethod

use of org.apache.hadoop.security.UserGroupInformation.AuthenticationMethod in project hadoop by apache.

the class FSNamesystem method getConnectionAuthenticationMethod.

/**
   * Returns authentication method used to establish the connection
   * @return AuthenticationMethod used to establish connection
   * @throws IOException
   */
private AuthenticationMethod getConnectionAuthenticationMethod() throws IOException {
    UserGroupInformation ugi = getRemoteUser();
    AuthenticationMethod authMethod = ugi.getAuthenticationMethod();
    if (authMethod == AuthenticationMethod.PROXY) {
        authMethod = ugi.getRealUser().getAuthenticationMethod();
    }
    return authMethod;
}