org.apache.ambari.server.security.authentication.kerberos

Class AmbariKerberosTicketValidator

java.lang.Object

org.apache.ambari.server.security.authentication.kerberos.AmbariKerberosTicketValidator

All Implemented Interfaces:

org.springframework.beans.factory.InitializingBean, org.springframework.security.kerberos.authentication.KerberosTicketValidator

@Component
public class AmbariKerberosTicketValidator
extends Object
implements org.springframework.security.kerberos.authentication.KerberosTicketValidator, org.springframework.beans.factory.InitializingBean

AmbariKerberosTicketValidator is a KerberosTicketValidator implementation that delegates to a SunJaasKerberosTicketValidator, if Kerberos authentication is enabled.

If Kerberos authentication is enabled, the following properties are set:

• SunJaasKerberosTicketValidator.setServicePrincipal(String) using the Ambari server property from Configuration.KERBEROS_AUTH_SPNEGO_PRINCIPAL
• SunJaasKerberosTicketValidator.setKeyTabLocation(Resource) using the Ambari server property from Configuration.KERBEROS_AUTH_SPNEGO_KEYTAB_FILE

Constructor Summary

Constructors

Constructor and Description
AmbariKerberosTicketValidator(Configuration configuration) Creates a new AmbariKerberosTicketValidator

Method Summary

Modifier and Type	Method and Description
void	afterPropertiesSet()
void	setDebug(boolean debug)
org.springframework.security.kerberos.authentication.KerberosTicketValidation	validateTicket(byte[] bytes)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AmbariKerberosTicketValidator

public AmbariKerberosTicketValidator(Configuration configuration)

Creates a new AmbariKerberosTicketValidator

Parameters:

configuration - the Ambari server configuration

Method Detail

afterPropertiesSet

public void afterPropertiesSet()
                        throws Exception

Specified by:

afterPropertiesSet in interface org.springframework.beans.factory.InitializingBean

Throws:

Exception

validateTicket

public org.springframework.security.kerberos.authentication.KerberosTicketValidation validateTicket(byte[] bytes)
                                                                                             throws org.springframework.security.authentication.BadCredentialsException

Specified by:

validateTicket in interface org.springframework.security.kerberos.authentication.KerberosTicketValidator

Throws:

org.springframework.security.authentication.BadCredentialsException

setDebug

public void setDebug(boolean debug)