org.apache.hive.service.auth

Class HiveAuthFactory

java.lang.Object

org.apache.hive.service.auth.HiveAuthFactory

public class HiveAuthFactory
extends Object

This class helps in some aspects of authentication. It creates the proper Thrift classes for the given configuration as well as helps with authenticating requests.

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	HiveAuthFactory.AuthTypes

Field Summary

Fields

Modifier and Type	Field and Description
static String	HS2_CLIENT_TOKEN
static String	HS2_PROXY_USER

Constructor Summary

Constructors

Constructor and Description
HiveAuthFactory(HiveConf conf)

Method Summary

Methods

Modifier and Type	Method and Description
void	cancelDelegationToken(String delegationToken)
org.apache.thrift.TProcessorFactory	getAuthProcFactory(ThriftCLIService service) Returns the thrift processor factory for HiveServer2 running in binary mode
org.apache.thrift.transport.TTransportFactory	getAuthTransFactory()
String	getDelegationToken(String owner, String renewer)
String	getIpAddress()
String	getRemoteUser()
Map<String,String>	getSaslProperties()
static org.apache.thrift.transport.TServerSocket	getServerSocket(String hiveHost, int portNum)
static org.apache.thrift.transport.TServerSocket	getServerSSLSocket(String hiveHost, int portNum, String keyStorePath, String keyStorePassWord, List<String> sslVersionBlacklist)
static org.apache.thrift.transport.TTransport	getSocketTransport(String host, int port, int loginTimeout)
static org.apache.thrift.transport.TTransport	getSSLSocket(String host, int port, int loginTimeout)
static org.apache.thrift.transport.TTransport	getSSLSocket(String host, int port, int loginTimeout, String trustStorePath, String trustStorePassWord)
String	getUserFromToken(String delegationToken)
static void	loginFromKeytab(HiveConf hiveConf)
static org.apache.hadoop.security.UserGroupInformation	loginFromSpnegoKeytabAndReturnUGI(HiveConf hiveConf)
void	renewDelegationToken(String delegationToken)
static void	verifyProxyAccess(String realUser, String proxyUser, String ipAddress, HiveConf hiveConf)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

HS2_PROXY_USER

public static final String HS2_PROXY_USER

See Also:

Constant Field Values

HS2_CLIENT_TOKEN

public static final String HS2_CLIENT_TOKEN

See Also:

Constant Field Values

Constructor Detail

HiveAuthFactory

public HiveAuthFactory(HiveConf conf)
                throws org.apache.thrift.transport.TTransportException

Throws:

org.apache.thrift.transport.TTransportException

Method Detail

getSaslProperties

public Map<String,String> getSaslProperties()

getAuthTransFactory

public org.apache.thrift.transport.TTransportFactory getAuthTransFactory()
                                                                  throws LoginException

Throws:

LoginException

getAuthProcFactory

public org.apache.thrift.TProcessorFactory getAuthProcFactory(ThriftCLIService service)
                                                       throws LoginException

Returns the thrift processor factory for HiveServer2 running in binary mode

Parameters:

service -

Returns:

Throws:

LoginException

getRemoteUser

public String getRemoteUser()

getIpAddress

public String getIpAddress()

loginFromKeytab

public static void loginFromKeytab(HiveConf hiveConf)
                            throws IOException

Throws:

IOException

loginFromSpnegoKeytabAndReturnUGI

public static org.apache.hadoop.security.UserGroupInformation loginFromSpnegoKeytabAndReturnUGI(HiveConf hiveConf)
                                                                                         throws IOException

Throws:

IOException

getSocketTransport

public static org.apache.thrift.transport.TTransport getSocketTransport(String host,
                                                        int port,
                                                        int loginTimeout)

getSSLSocket

public static org.apache.thrift.transport.TTransport getSSLSocket(String host,
                                                  int port,
                                                  int loginTimeout)
                                                           throws org.apache.thrift.transport.TTransportException

Throws:

org.apache.thrift.transport.TTransportException

getSSLSocket

public static org.apache.thrift.transport.TTransport getSSLSocket(String host,
                                                  int port,
                                                  int loginTimeout,
                                                  String trustStorePath,
                                                  String trustStorePassWord)
                                                           throws org.apache.thrift.transport.TTransportException

Throws:

org.apache.thrift.transport.TTransportException

getServerSocket

public static org.apache.thrift.transport.TServerSocket getServerSocket(String hiveHost,
                                                        int portNum)
                                                                 throws org.apache.thrift.transport.TTransportException

Throws:

org.apache.thrift.transport.TTransportException

getServerSSLSocket

public static org.apache.thrift.transport.TServerSocket getServerSSLSocket(String hiveHost,
                                                           int portNum,
                                                           String keyStorePath,
                                                           String keyStorePassWord,
                                                           List<String> sslVersionBlacklist)
                                                                    throws org.apache.thrift.transport.TTransportException,
                                                                           UnknownHostException

Throws:

org.apache.thrift.transport.TTransportException

UnknownHostException

getDelegationToken

public String getDelegationToken(String owner,
                        String renewer)
                          throws HiveSQLException

Throws:

HiveSQLException

cancelDelegationToken

public void cancelDelegationToken(String delegationToken)
                           throws HiveSQLException

Throws:

HiveSQLException

renewDelegationToken

public void renewDelegationToken(String delegationToken)
                          throws HiveSQLException

Throws:

HiveSQLException

getUserFromToken

public String getUserFromToken(String delegationToken)
                        throws HiveSQLException

Throws:

HiveSQLException

verifyProxyAccess

public static void verifyProxyAccess(String realUser,
                     String proxyUser,
                     String ipAddress,
                     HiveConf hiveConf)
                              throws HiveSQLException

Throws:

HiveSQLException