org.apache.hadoop.security

Class KerberosDiags

java.lang.Object

org.apache.hadoop.security.KerberosDiags

All Implemented Interfaces:

Closeable, AutoCloseable

public class KerberosDiags
extends Object
implements Closeable

Kerberos diagnostics At some point this may move to hadoop core, so please keep use of slider methods and classes to ~0. This operation expands some of the diagnostic output of the security code, but not all. For completeness Set the environment variable HADOOP_JAAS_DEBUG=true Set the log level for org.apache.hadoop.security=DEBUG

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	KerberosDiags.KerberosDiagsFailure Diags failures include an exit code 41, "unauth"

Field Summary

Fields

Modifier and Type	Field and Description
static String	JAVA_SECURITY_KRB5_CONF
static String	JAVA_SECURITY_KRB5_REALM
static String	KRB5_CCNAME
static String	SUN_SECURITY_KRB5_DEBUG
static String	SUN_SECURITY_SPNEGO_DEBUG

Constructor Summary

Constructors

Constructor and Description
KerberosDiags(org.apache.hadoop.conf.Configuration conf, PrintWriter out, List<String> services, File keytab, String principal)

Method Summary

Methods

Modifier and Type	Method and Description
void	close()
boolean	execute() Execute diagnostics.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

KRB5_CCNAME

public static final String KRB5_CCNAME

See Also:

Constant Field Values

JAVA_SECURITY_KRB5_CONF

public static final String JAVA_SECURITY_KRB5_CONF

See Also:

Constant Field Values

JAVA_SECURITY_KRB5_REALM

public static final String JAVA_SECURITY_KRB5_REALM

See Also:

Constant Field Values

SUN_SECURITY_KRB5_DEBUG

public static final String SUN_SECURITY_KRB5_DEBUG

See Also:

Constant Field Values

SUN_SECURITY_SPNEGO_DEBUG

public static final String SUN_SECURITY_SPNEGO_DEBUG

See Also:

Constant Field Values

Constructor Detail

KerberosDiags

public KerberosDiags(org.apache.hadoop.conf.Configuration conf,
             PrintWriter out,
             List<String> services,
             File keytab,
             String principal)

Method Detail

close

public void close()
           throws IOException

Specified by:

close in interface Closeable

Specified by:

close in interface AutoCloseable

Throws:

IOException

execute

public boolean execute()
                throws Exception

Execute diagnostics.

Things it would be nice if UGI made accessible

1. A way to enable JAAS debug programatically
2. Acess to the TGT

Returns:

true if security was enabled and all probes were successful

Throws:

KerberosDiags.KerberosDiagsFailure - explicitly raised failure

Exception - other security problems