org.apache.ambari.server.security.authentication.kerberos

Class AmbariKerberosAuthenticationProvider

java.lang.Object

org.apache.ambari.server.security.authentication.kerberos.AmbariKerberosAuthenticationProvider

All Implemented Interfaces:

org.springframework.beans.factory.InitializingBean, org.springframework.security.authentication.AuthenticationProvider

public class AmbariKerberosAuthenticationProvider
extends Object
implements org.springframework.security.authentication.AuthenticationProvider, org.springframework.beans.factory.InitializingBean

AmbariKerberosAuthenticationProvider is an AuthenticationProvider implementation used to authenticate users using a Kerberos ticket.

In order for this provider to be usable, Kerberos authentication must be enabled. This may be done using the ambari-server setup-kerberos CLI.

This implementation supports Trusted Proxy authentication.

Constructor Summary

Constructors

Constructor and Description
AmbariKerberosAuthenticationProvider(AmbariAuthToLocalUserDetailsService authToLocalUserDetailsService, AmbariProxiedUserDetailsService proxiedUserDetailsService, org.springframework.security.kerberos.authentication.KerberosTicketValidator ticketValidator)

Method Summary

Modifier and Type	Method and Description
void	afterPropertiesSet()
org.springframework.security.core.Authentication	authenticate(org.springframework.security.core.Authentication authentication)
void	setAuthToLocalUserDetailsService(AmbariAuthToLocalUserDetailsService authToLocalUserDetailsService)
void	setProxiedUserDetailsService(AmbariProxiedUserDetailsService proxiedUserDetailsService)
void	setTicketValidator(org.springframework.security.kerberos.authentication.KerberosTicketValidator ticketValidator)
boolean	supports(Class<? extends Object> auth)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AmbariKerberosAuthenticationProvider

@Inject
public AmbariKerberosAuthenticationProvider(AmbariAuthToLocalUserDetailsService authToLocalUserDetailsService,
                                                    AmbariProxiedUserDetailsService proxiedUserDetailsService,
                                                    org.springframework.security.kerberos.authentication.KerberosTicketValidator ticketValidator)

Method Detail

authenticate

public org.springframework.security.core.Authentication authenticate(org.springframework.security.core.Authentication authentication)
                                                              throws org.springframework.security.core.AuthenticationException

Specified by:

authenticate in interface org.springframework.security.authentication.AuthenticationProvider

Throws:

org.springframework.security.core.AuthenticationException

supports

public boolean supports(Class<? extends Object> auth)

Specified by:

supports in interface org.springframework.security.authentication.AuthenticationProvider

afterPropertiesSet

public void afterPropertiesSet()
                        throws Exception

Specified by:

afterPropertiesSet in interface org.springframework.beans.factory.InitializingBean

Throws:

Exception

setAuthToLocalUserDetailsService

public void setAuthToLocalUserDetailsService(AmbariAuthToLocalUserDetailsService authToLocalUserDetailsService)

setProxiedUserDetailsService

public void setProxiedUserDetailsService(AmbariProxiedUserDetailsService proxiedUserDetailsService)

setTicketValidator

public void setTicketValidator(org.springframework.security.kerberos.authentication.KerberosTicketValidator ticketValidator)