Added Methods |
String buildDTServiceName(URI, int)
|
create the service name for a Delegation token |
Text buildTokenService(InetSocketAddress )
|
Construct the service key for a token |
void fetchServiceTicket(URL )
|
Explicitly pull the service ticket for the specified host. |
AccessControlList getAdminAcls(Configuration, String)
|
Get the ACL object representing the cluster administrators The user who starts the daemon is automatically added as an admin |
InetAddress getByName(String )
|
Resolves a host subject to the security requirements determined by hadoop.security.token.service.use_ip. |
String getHostFromPrincipal(String )
|
Get the host name from the principal name of format /host@realm. |
String getServerPrincipal(String, String)
|
Convert Kerberos principal name pattern to valid Kerberos principal names. |
String getServerPrincipal(String, InetAddress)
|
Convert Kerberos principal name pattern to valid Kerberos principal names. |
InetSocketAddress getTokenServiceAddr(Token )
|
Decode the given token's service field into an InetAddress |
boolean isOriginalTGT(String )
|
|
void login(Configuration, String, String)
|
If a keytab has been provided login as that user. |
void login(Configuration, String, String, String)
|
If a keytab has been provided login as that user. |
URLConnection openSecureHttpConnection(URL )
|
Open a (if need be) secure connection to a URL in a secure environment that is using SPNEGO or KSSL to authenticate its URLs. |
void setTokenService(Token, InetSocketAddress)
|
Set the given token's service to the format expected by the RPC client |
boolean useKsslAuth()
|
@return true if we should use KSSL to authenticate NN HTTP endpoints false to use SPNEGO or if security is disabled. |