org.apache.storm.security.auth

Class AuthUtils

java.lang.Object

org.apache.storm.security.auth.AuthUtils

public class AuthUtils
extends Object

Field Summary

Fields

Modifier and Type	Field and Description
static String	LOGIN_CONTEXT_CLIENT
static String	LOGIN_CONTEXT_PACEMAKER_CLIENT
static String	LOGIN_CONTEXT_PACEMAKER_DIGEST
static String	LOGIN_CONTEXT_PACEMAKER_SERVER
static String	LOGIN_CONTEXT_SERVER
static String	SERVICE

Constructor Summary

Constructors

Constructor and Description
AuthUtils()

Method Summary

Modifier and Type	Method and Description
static KerberosTicket	cloneKerberosTicket(KerberosTicket kerberosTicket)
static KerberosTicket	deserializeKerberosTicket(byte[] tgtBytes)
static String	get(Configuration configuration, String section, String key)
static Collection<IAutoCredentials>	GetAutoCredentials(Map storm_conf) Get all of the configured AutoCredential Plugins.
static Configuration	GetConfiguration(Map storm_conf) Construct a JAAS configuration object per storm configuration file
static Collection<ICredentialsRenewer>	GetCredentialRenewers(Map conf) Get all of the configured Credential Renewer Plugins.
static IHttpCredentialsPlugin	GetDrpcHttpCredentialsPlugin(Map conf) Construct an HttpServletRequest credential plugin specified by the DRPC storm configuration
static IGroupMappingServiceProvider	GetGroupMappingServiceProviderPlugin(Map storm_conf) Construct a group mapping service provider plugin
static Collection<INimbusCredentialPlugin>	getNimbusAutoCredPlugins(Map conf) Get all the Nimbus Auto cred plugins.
static IPrincipalToLocal	GetPrincipalToLocalPlugin(Map storm_conf) Construct a principal to local plugin
static ITransportPlugin	GetTransportPlugin(ThriftConnectionType type, Map storm_conf, Configuration login_conf) Construct a transport plugin per storm configuration
static IHttpCredentialsPlugin	GetUiHttpCredentialsPlugin(Map conf) Construct an HttpServletRequest credential plugin specified by the UI storm configuration
static String	makeDigestPayload(Configuration login_config, String config_section)
static Subject	populateSubject(Subject subject, Collection<IAutoCredentials> autos, Map<String,String> credentials) Populate a subject from credentials using the IAutoCredentials.
static SortedMap<String,?>	PullConfig(Configuration conf, String conf_entry) Pull a set of keys out of a Configuration.
static byte[]	serializeKerberosTicket(KerberosTicket tgt)
static void	updateSubject(Subject subject, Collection<IAutoCredentials> autos, Map<String,String> credentials) Update a subject from credentials using the IAutoCredentials.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

LOGIN_CONTEXT_SERVER

public static final String LOGIN_CONTEXT_SERVER

See Also:

Constant Field Values

LOGIN_CONTEXT_CLIENT

public static final String LOGIN_CONTEXT_CLIENT

See Also:

Constant Field Values

LOGIN_CONTEXT_PACEMAKER_DIGEST

public static final String LOGIN_CONTEXT_PACEMAKER_DIGEST

See Also:

Constant Field Values

LOGIN_CONTEXT_PACEMAKER_SERVER

public static final String LOGIN_CONTEXT_PACEMAKER_SERVER

See Also:

Constant Field Values

LOGIN_CONTEXT_PACEMAKER_CLIENT

public static final String LOGIN_CONTEXT_PACEMAKER_CLIENT

See Also:

Constant Field Values

SERVICE

public static final String SERVICE

See Also:

Constant Field Values

Constructor Detail

AuthUtils

public AuthUtils()

Method Detail

GetConfiguration

public static Configuration GetConfiguration(Map storm_conf)

Construct a JAAS configuration object per storm configuration file

Parameters:

storm_conf - Storm configuration

Returns:

JAAS configuration object

PullConfig

public static SortedMap<String,?> PullConfig(Configuration conf,
                                             String conf_entry)
                                      throws IOException

Pull a set of keys out of a Configuration.

Parameters:

conf - The config to pull the key/value pairs out of.

conf_entry - The app configuration entry name to get stuff from.

Returns:

Return a map of the configs in conf.

Throws:

IOException

GetPrincipalToLocalPlugin

public static IPrincipalToLocal GetPrincipalToLocalPlugin(Map storm_conf)

Construct a principal to local plugin

Parameters:

storm_conf - storm configuration

Returns:

the plugin

GetGroupMappingServiceProviderPlugin

public static IGroupMappingServiceProvider GetGroupMappingServiceProviderPlugin(Map storm_conf)

Construct a group mapping service provider plugin

Parameters:

storm_conf - storm configuration

Returns:

the plugin

GetCredentialRenewers

public static Collection<ICredentialsRenewer> GetCredentialRenewers(Map conf)

Get all of the configured Credential Renewer Plugins.

Parameters:

conf - the storm configuration to use.

Returns:

the configured credential renewers.

getNimbusAutoCredPlugins

public static Collection<INimbusCredentialPlugin> getNimbusAutoCredPlugins(Map conf)

Get all the Nimbus Auto cred plugins.

Parameters:

conf - nimbus configuration to use.

Returns:

nimbus auto credential plugins.

GetAutoCredentials

public static Collection<IAutoCredentials> GetAutoCredentials(Map storm_conf)

Get all of the configured AutoCredential Plugins.

Parameters:

storm_conf - the storm configuration to use.

Returns:

the configured auto credentials.

populateSubject

public static Subject populateSubject(Subject subject,
                                      Collection<IAutoCredentials> autos,
                                      Map<String,String> credentials)

Populate a subject from credentials using the IAutoCredentials.

Parameters:

subject - the subject to populate or null if a new Subject should be created.

autos - the IAutoCredentials to call to populate the subject.

credentials - the credentials to pull from

Returns:

the populated subject.

updateSubject

public static void updateSubject(Subject subject,
                                 Collection<IAutoCredentials> autos,
                                 Map<String,String> credentials)

Update a subject from credentials using the IAutoCredentials.

Parameters:

subject - the subject to update

autos - the IAutoCredentials to call to update the subject.

credentials - the credentials to pull from

GetTransportPlugin

public static ITransportPlugin GetTransportPlugin(ThriftConnectionType type,
                                                  Map storm_conf,
                                                  Configuration login_conf)

Construct a transport plugin per storm configuration

GetUiHttpCredentialsPlugin

public static IHttpCredentialsPlugin GetUiHttpCredentialsPlugin(Map conf)

Construct an HttpServletRequest credential plugin specified by the UI storm configuration

Parameters:

conf - storm configuration

Returns:

the plugin

GetDrpcHttpCredentialsPlugin

public static IHttpCredentialsPlugin GetDrpcHttpCredentialsPlugin(Map conf)

Construct an HttpServletRequest credential plugin specified by the DRPC storm configuration

Parameters:

conf - storm configuration

Returns:

the plugin

get

public static String get(Configuration configuration,
                         String section,
                         String key)
                  throws IOException

Throws:

IOException

makeDigestPayload

public static String makeDigestPayload(Configuration login_config,
                                       String config_section)

serializeKerberosTicket

public static byte[] serializeKerberosTicket(KerberosTicket tgt)
                                      throws Exception

Throws:

Exception

deserializeKerberosTicket

public static KerberosTicket deserializeKerberosTicket(byte[] tgtBytes)

cloneKerberosTicket

public static KerberosTicket cloneKerberosTicket(KerberosTicket kerberosTicket)