org.apache.ambari.server.serveraction.kerberos

Class FinalizeKerberosServerAction

java.lang.Object

org.apache.ambari.server.serveraction.AbstractServerAction

org.apache.ambari.server.serveraction.kerberos.KerberosServerAction

org.apache.ambari.server.serveraction.kerberos.FinalizeKerberosServerAction

All Implemented Interfaces:

ServerAction

public class FinalizeKerberosServerAction
extends KerberosServerAction

Nested Class Summary

Nested classes/interfaces inherited from class org.apache.ambari.server.serveraction.kerberos.KerberosServerAction

KerberosServerAction.KerberosCommandParameters, KerberosServerAction.OperationType

Field Summary

Fields inherited from class org.apache.ambari.server.serveraction.kerberos.KerberosServerAction

AUTHENTICATED_USER_NAME, DATA_DIRECTORY, DATA_DIRECTORY_PREFIX, DEFAULT_REALM, HOST_FILTER, IDENTITY_FILTER, INCLUDE_AMBARI_IDENTITY, KDC_TYPE, KEYTAB_CONTENT_BASE64, OPERATION_TYPE, PRECONFIGURE_SERVICES, SERVICE_COMPONENT_FILTER, UPDATE_CONFIGURATION_NOTE, UPDATE_CONFIGURATION_POLICY

Fields inherited from class org.apache.ambari.server.serveraction.AbstractServerAction

actionLog, gson

Fields inherited from interface org.apache.ambari.server.serveraction.ServerAction

ACTION_NAME, ACTION_USER_NAME, DEFAULT_LONG_RUNNING_TASK_TIMEOUT_SECONDS, WRAPPED_CLASS_NAME

Constructor Summary

Constructors

Constructor and Description
FinalizeKerberosServerAction(TopologyHolder topologyHolder)

Method Summary

Modifier and Type	Method and Description
CommandReport	execute(ConcurrentMap<String,Object> requestSharedDataContext) Executes this ServerAction This is typically called by the ServerActionExecutor in it's own thread, but there is no guarantee that this is the case.
protected CommandReport	processIdentity(ResolvedKerberosPrincipal resolvedPrincipal, KerberosOperationHandler operationHandler, Map<String,String> kerberosConfiguration, boolean includedInFilter, Map<String,Object> requestSharedDataContext) Processes an identity as necessary.

Methods inherited from class org.apache.ambari.server.serveraction.kerberos.KerberosServerAction

ambariServerHostID, deleteDataDirectory, getCluster, getClusterName, getClusters, getCommandParameterValue, getCommandPreconfigureType, getConfigurationProperties, getDataDirectoryPath, getDataDirectoryPath, getDefaultRealm, getHostFilter, getIdentityFilter, getKDCType, getOperationType, getPrincipalKeyNumberMap, getPrincipalPasswordMap, getServiceComponentFilter, getUpdateConfigurationPolicy, hasHostFilters, processIdentities, pruneServiceFilter, setPrincipalPasswordMap

Methods inherited from class org.apache.ambari.server.serveraction.AbstractServerAction

auditLog, createCommandReport, createCompletedCommandReport, getCommandParameters, getCommandParameterValue, getExecutionCommand, getHostRoleCommand, setExecutionCommand, setHostRoleCommand

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

FinalizeKerberosServerAction

@Inject
public FinalizeKerberosServerAction(TopologyHolder topologyHolder)

Method Detail

processIdentity

protected CommandReport processIdentity(ResolvedKerberosPrincipal resolvedPrincipal,
                                        KerberosOperationHandler operationHandler,
                                        Map<String,String> kerberosConfiguration,
                                        boolean includedInFilter,
                                        Map<String,Object> requestSharedDataContext)
                                 throws org.apache.ambari.server.AmbariException

Processes an identity as necessary.

This implementation ensures that keytab files for the Ambari identities have the correct permissions. This is important in the event a secure cluster was created via Blueprints since some user accounts and groups may not have been available (at the OS level) when the keytab files were created.

Specified by:

processIdentity in class KerberosServerAction

Parameters:

resolvedPrincipal - a ResolvedKerberosPrincipal object to process

operationHandler - a KerberosOperationHandler used to perform Kerberos-related tasks for specific Kerberos implementations (MIT, Active Directory, etc...)

kerberosConfiguration - a Map of configuration properties from kerberos-env

includedInFilter - a Boolean value indicating whather the principal is included in the current filter or not

requestSharedDataContext - a Map to be used a shared data among all ServerActions related to a given request @return null, always

Throws:

org.apache.ambari.server.AmbariException

execute

public CommandReport execute(ConcurrentMap<String,Object> requestSharedDataContext)
                      throws org.apache.ambari.server.AmbariException,
                             InterruptedException

Description copied from interface: ServerAction

Executes this ServerAction

This is typically called by the ServerActionExecutor in it's own thread, but there is no guarantee that this is the case. It is expected that the ExecutionCommand and HostRoleCommand properties are set before calling this method.

Parameters:

requestSharedDataContext - a Map to be used a shared data among all ServerActions related to a given request

Returns:

Throws:

org.apache.ambari.server.AmbariException

InterruptedException