org.apache.hadoop.security.authorize

Interface ImpersonationProvider

All Superinterfaces:

Configurable

All Known Implementing Classes:

DefaultImpersonationProvider

@InterfaceStability.Unstable
 @InterfaceAudience.Public
public interface ImpersonationProvider
extends Configurable

Method Summary

Modifier and Type	Method and Description
void	authorize(UserGroupInformation user, InetAddress remoteAddress) Authorize the superuser which is doing doAs.
default void	authorize(UserGroupInformation user, String remoteAddress) Authorize the superuser which is doing doAs.
void	init(String configurationPrefix) Specifies the configuration prefix for the proxy user properties and initializes the provider.

Methods inherited from interface org.apache.hadoop.conf.Configurable

getConf, setConf

Method Detail

init

void init(String configurationPrefix)

Specifies the configuration prefix for the proxy user properties and initializes the provider.

Parameters:

configurationPrefix - the configuration prefix for the proxy user properties

authorize

default void authorize(UserGroupInformation user,
                       String remoteAddress)
                throws AuthorizationException

Authorize the superuser which is doing doAs. authorize(UserGroupInformation, InetAddress) should be preferred to avoid possibly re-resolving the ip address.

Parameters:

user - ugi of the effective or proxy user which contains a real user.

remoteAddress - the ip address of client.

Throws:

AuthorizationException

authorize

void authorize(UserGroupInformation user,
               InetAddress remoteAddress)
        throws AuthorizationException

Authorize the superuser which is doing doAs.

Parameters:

user - ugi of the effective or proxy user which contains a real user

remoteAddress - the ip address of client

Throws:

AuthorizationException