org.apache.hadoop.security.authorize
Class ProxyUsers

java.lang.Object
  extended by org.apache.hadoop.security.authorize.ProxyUsers

public class ProxyUsers
extends Object


Field Summary
static String CONF_GROUPS
           
static String CONF_HADOOP_PROXYUSER
           
static String CONF_HADOOP_PROXYUSER_RE
           
 
Constructor Summary
ProxyUsers()
           
 
Method Summary
static void authorize(UserGroupInformation user, String remoteAddress, Configuration newConf)
          Authorize the superuser which is doing doAs
static String getProxySuperuserGroupConfKey(String userName)
          Returns configuration key for effective user groups allowed for a superuser
static String getProxySuperuserIpConfKey(String userName)
          Return configuration key for superuser ip addresses
static void refreshSuperUserGroupsConfiguration()
          reread the conf and get new values for "hadoop.proxyuser.*.groups/hosts"
static void refreshSuperUserGroupsConfiguration(Configuration conf)
          refresh configuration
 
Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
 

Field Detail

CONF_GROUPS

public static final String CONF_GROUPS
See Also:
Constant Field Values

CONF_HADOOP_PROXYUSER

public static final String CONF_HADOOP_PROXYUSER
See Also:
Constant Field Values

CONF_HADOOP_PROXYUSER_RE

public static final String CONF_HADOOP_PROXYUSER_RE
See Also:
Constant Field Values
Constructor Detail

ProxyUsers

public ProxyUsers()
Method Detail

refreshSuperUserGroupsConfiguration

public static void refreshSuperUserGroupsConfiguration()
reread the conf and get new values for "hadoop.proxyuser.*.groups/hosts"


refreshSuperUserGroupsConfiguration

public static void refreshSuperUserGroupsConfiguration(Configuration conf)
refresh configuration

Parameters:
conf -

getProxySuperuserGroupConfKey

public static String getProxySuperuserGroupConfKey(String userName)
Returns configuration key for effective user groups allowed for a superuser

Parameters:
userName - name of the superuser
Returns:
configuration key for superuser groups

getProxySuperuserIpConfKey

public static String getProxySuperuserIpConfKey(String userName)
Return configuration key for superuser ip addresses

Parameters:
userName - name of the superuser
Returns:
configuration key for superuser ip-addresses

authorize

public static void authorize(UserGroupInformation user,
                             String remoteAddress,
                             Configuration newConf)
                      throws AuthorizationException
Authorize the superuser which is doing doAs

Parameters:
user - ugi of the effective or proxy user which contains a real user
remoteAddress - the ip address of client
newConf - configuration
Throws:
AuthorizationException


Copyright © 2009 The Apache Software Foundation