Package org.apache.hadoop.security

Interface Summary

RefreshUserMappingsProtocol

Protocol use

Class Summary

AuthenticationFilterInitializer	Initializes Alfredo AuthenticationFilter which provides support for Kerberos HTTP SPENGO authentication.
Credentials	A class that provides the facilities of reading and writing secret keys and Tokens.
Groups	A user-to-groups mapping service.
JniBasedUnixGroupsMapping	A JNI-based implementation of GroupMappingServiceProvider that invokes libC calls to get the group memberships of a given user.
JniBasedUnixGroupsNetgroupMapping	A JNI-based implementation of GroupMappingServiceProvider that invokes libC calls to get the group memberships of a given user.
KerberosName	This class implements parsing and handling of Kerberos principal names.
Krb5AndCertsSslSocketConnector	Extend Jetty's SslSocketConnector to optionally also provide Kerberos5ized SSL sockets.
Krb5AndCertsSslSocketConnector.Krb5SslFilter	Filter that takes the Kerberos principal identified in the Krb5AndCertsSslSocketConnector and provides it the to the servlet at runtime, setting the principal and short name.
NetgroupCache	Class that caches the netgroups and inverts group-to-user map to user-to-group map
SaslInputStream	A SaslInputStream is composed of an InputStream and a SaslServer (or SaslClient) so that read() methods return data that are read in from the underlying InputStream but have been additionally processed by the SaslServer (or SaslClient) object.
SaslOutputStream	A SaslOutputStream is composed of an OutputStream and a SaslServer (or SaslClient) so that write() methods first process the data before writing them out to the underlying OutputStream.
SaslRpcClient	A utility class that encapsulates SASL logic for RPC client
SaslRpcServer	A utility class for dealing with SASL on RPC server
SaslRpcServer.SaslDigestCallbackHandler	CallbackHandler for SASL DIGEST-MD5 mechanism
SaslRpcServer.SaslGssCallbackHandler	CallbackHandler for SASL GSSAPI Kerberos mechanism
SecurityUtil
SecurityUtil.QualifiedHostResolver	This an alternate resolver with important properties that the standard java resolver lacks: 1) The hostname is fully qualified.
ShellBasedUnixGroupsMapping	A simple shell-based implementation of GroupMappingServiceProvider that exec's the groups shell command to fetch the group memberships of a given user.
ShellBasedUnixGroupsNetgroupMapping	A simple shell-based implementation of GroupMappingServiceProvider that exec's the groups shell command to fetch the group memberships of a given user.
UserGroupInformation	User and group information for Hadoop.
UserGroupInformation.HadoopLoginModule	A login module that looks at the Kerberos, Unix, or Windows principal and adds the corresponding UserName.

Enum Summary

Krb5AndCertsSslSocketConnector.MODE
SaslRpcServer.AuthMethod	Authentication method
SaslRpcServer.QualityOfProtection
SaslRpcServer.SaslStatus
UserGroupInformation.AuthenticationMethod	existing types of authentications' methods

Exception Summary

AccessControlException	An exception class for access control related issues.
KerberosName.BadFormatString
KerberosName.NoMatchingRule

Annotation Types Summary

KerberosInfo

Indicates Kerberos related information to be used