org.apache.ambari.server.security.authentication.kerberos

Class AmbariKerberosAuthenticationProperties

java.lang.Object

org.apache.ambari.server.security.authentication.kerberos.AmbariKerberosAuthenticationProperties

public class AmbariKerberosAuthenticationProperties
extends Object

AmbariKerberosAuthenticationProperties is a container for Kerberos authentication-related configuration properties. This container holds interpreted configuration data to be used when authenticating users using Kerberos.

If Kerberos authentication is not enabled for Ambari kerberosAuthenticationEnabled == false, then there is no guarantee that any other property in this container is valid.

Constructor Summary

Constructors

Constructor and Description
AmbariKerberosAuthenticationProperties()

Method Summary

Modifier and Type	Method and Description
String	getAuthToLocalRules() Gets the configured auth-to-local rule set.
List<UserAuthenticationType>	getOrderedUserTypes() Gets the list of UserAuthenticationTypes (in preference order) to use to look up uer accounts in the Ambari database.
String	getSpnegoKeytabFilePath() Gets the configured SPNEGO keytab file path.
String	getSpnegoPrincipalName() Gets the configured SPNEGO principal name.
boolean	isKerberosAuthenticationEnabled() Get whether Kerberos authentication is enabled or not.
void	setAuthToLocalRules(String authToLocalRules) Sets the configured auth-to-local rule set.
void	setKerberosAuthenticationEnabled(boolean kerberosAuthenticationEnabled) Sets whether Kerberos authentication is enabled or not.
void	setSpnegoKeytabFilePath(String spnegoKeytabFilePath) Sets the configured SPNEGO keytab file path.
void	setSpnegoPrincipalName(String spnegoPrincipalName) Sets the configured SPNEGO principal name.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AmbariKerberosAuthenticationProperties

public AmbariKerberosAuthenticationProperties()

Method Detail

isKerberosAuthenticationEnabled

public boolean isKerberosAuthenticationEnabled()

Get whether Kerberos authentication is enabled or not.

Returns:

true if Kerberos authentication is enabled; otherwise false

setKerberosAuthenticationEnabled

public void setKerberosAuthenticationEnabled(boolean kerberosAuthenticationEnabled)

Sets whether Kerberos authentication is enabled or not.

Parameters:

kerberosAuthenticationEnabled - true if Kerberos authentication is enabled; otherwise false

getSpnegoPrincipalName

public String getSpnegoPrincipalName()

Gets the configured SPNEGO principal name. This may be null if Kerberos authentication is not enabled.

Returns:

the SPNEGO principal name or null if Kerberos authentication is not enabled

setSpnegoPrincipalName

public void setSpnegoPrincipalName(String spnegoPrincipalName)

Sets the configured SPNEGO principal name.

Parameters:

spnegoPrincipalName - a principal name

getSpnegoKeytabFilePath

public String getSpnegoKeytabFilePath()

Gets the configured SPNEGO keytab file path. This may be null if Kerberos authentication is not enabled.

Returns:

the SPNEGO keytab file path or null if Kerberos authentication is not enabled

setSpnegoKeytabFilePath

public void setSpnegoKeytabFilePath(String spnegoKeytabFilePath)

Sets the configured SPNEGO keytab file path.

Parameters:

spnegoKeytabFilePath - a keytab file path

getOrderedUserTypes

public List<UserAuthenticationType> getOrderedUserTypes()

Gets the list of UserAuthenticationTypes (in preference order) to use to look up uer accounts in the Ambari database.

Returns:

a list of UserAuthenticationTypes

getAuthToLocalRules

public String getAuthToLocalRules()

Gets the configured auth-to-local rule set. This may be null if Kerberos authentication is not enabled.

Returns:

a string representing an auth-to-local rule set or null if Kerberos authentication is not enabled

setAuthToLocalRules

public void setAuthToLocalRules(String authToLocalRules)

Sets the configured auth-to-local rule set.

Parameters:

authToLocalRules - a string representing an auth-to-local rule set