org.apache.hadoop.hbase.security

Class SaslClientHandler

java.lang.Object

ChannelDuplexHandler

org.apache.hadoop.hbase.security.SaslClientHandler

@InterfaceAudience.Private
public class SaslClientHandler
extends ChannelDuplexHandler

Handles Sasl connections

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static interface	SaslClientHandler.SaslExceptionHandler Handler for exceptions during Sasl connection
static interface	SaslClientHandler.SaslSuccessfulConnectHandler Handler for successful connects

Field Summary

Fields

Modifier and Type	Field and Description
static Log	LOG

Constructor Summary

Constructors

Constructor and Description
SaslClientHandler(UserGroupInformation ticket, AuthMethod method, <any> token, String serverPrincipal, boolean fallbackAllowed, String rpcProtection, SaslClientHandler.SaslExceptionHandler exceptionHandler, SaslClientHandler.SaslSuccessfulConnectHandler successfulConnectHandler) Constructor

Method Summary

Modifier and Type	Method and Description
void	channelRead(ChannelHandlerContext ctx, Object msg)
void	channelUnregistered(ChannelHandlerContext ctx)
protected SaslClient	createDigestSaslClient(String[] mechanismNames, String saslDefaultRealm, CallbackHandler saslClientCallbackHandler) Create a Digest Sasl client
protected SaslClient	createKerberosSaslClient(String[] mechanismNames, String userFirstPart, String userSecondPart) Create Kerberos client
void	exceptionCaught(ChannelHandlerContext ctx, Throwable cause)
void	handlerAdded(ChannelHandlerContext ctx)
void	write(ChannelHandlerContext ctx, Object msg, ChannelPromise promise)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

LOG

public static final Log LOG

Constructor Detail

SaslClientHandler

public SaslClientHandler(UserGroupInformation ticket,
                         AuthMethod method,
                         <any> token,
                         String serverPrincipal,
                         boolean fallbackAllowed,
                         String rpcProtection,
                         SaslClientHandler.SaslExceptionHandler exceptionHandler,
                         SaslClientHandler.SaslSuccessfulConnectHandler successfulConnectHandler)
                  throws IOException

Constructor

Parameters:

ticket - the ugi

method - auth method

token - for Sasl

serverPrincipal - Server's Kerberos principal name

fallbackAllowed - True if server may also fall back to less secure connection

rpcProtection - Quality of protection. Integrity or privacy

exceptionHandler - handler for exceptions

successfulConnectHandler - handler for succesful connects

Throws:

IOException - if handler could not be created

Method Detail

createDigestSaslClient

protected SaslClient createDigestSaslClient(String[] mechanismNames,
                                            String saslDefaultRealm,
                                            CallbackHandler saslClientCallbackHandler)
                                     throws IOException

Create a Digest Sasl client

Parameters:

mechanismNames - names of mechanisms

saslDefaultRealm - default realm for sasl

saslClientCallbackHandler - handler for the client

Returns:

new SaslClient

Throws:

IOException - if creation went wrong

createKerberosSaslClient

protected SaslClient createKerberosSaslClient(String[] mechanismNames,
                                              String userFirstPart,
                                              String userSecondPart)
                                       throws IOException

Create Kerberos client

Parameters:

mechanismNames - names of mechanisms

userFirstPart - first part of username

userSecondPart - second part of username

Returns:

new SaslClient

Throws:

IOException - if fails

channelUnregistered

public void channelUnregistered(ChannelHandlerContext ctx)
                         throws Exception

Throws:

Exception

handlerAdded

public void handlerAdded(ChannelHandlerContext ctx)
                  throws Exception

Throws:

Exception

channelRead

public void channelRead(ChannelHandlerContext ctx,
                        Object msg)
                 throws Exception

Throws:

Exception

exceptionCaught

public void exceptionCaught(ChannelHandlerContext ctx,
                            Throwable cause)
                     throws Exception

Throws:

Exception

write

public void write(ChannelHandlerContext ctx,
                  Object msg,
                  ChannelPromise promise)
           throws Exception

Throws:

Exception