Package | Description |
---|---|
org.apache.hadoop.fs |
Implementations of
AbstractFileSystem for hdfs
over rpc and hdfs over web. |
org.apache.hadoop.hdfs.server.namenode | |
org.apache.hadoop.ipc |
Tools to help define network clients and servers.
|
org.apache.hadoop.security | |
org.apache.hadoop.security.authorize |
Support for service-level authorization.
|
org.apache.hadoop.security.token |
Support for delegation tokens.
|
org.apache.hadoop.security.token.delegation |
Router security token delegation.
|
org.apache.hadoop.yarn.client | |
org.apache.hadoop.yarn.logaggregation.filecontroller |
Licensed to the Apache Software Foundation (ASF) under one
or more contributor license agreements.
|
org.apache.hadoop.yarn.security |
Licensed to the Apache Software Foundation (ASF) under one
or more contributor license agreements.
|
org.apache.hadoop.yarn.security.client |
Licensed to the Apache Software Foundation (ASF) under one
or more contributor license agreements.
|
Modifier and Type | Method and Description |
---|---|
UserGroupInformation |
FileContext.getUgi()
Gets the ugi in the file-context
|
Modifier and Type | Method and Description |
---|---|
static void |
FileSystem.closeAllForUGI(UserGroupInformation ugi)
Close all cached FileSystem instances for a given UGI.
|
Modifier and Type | Method and Description |
---|---|
abstract void |
HdfsAuditLogger.logAuditEvent(boolean succeeded,
String userName,
InetAddress addr,
String cmd,
String src,
String dst,
FileStatus stat,
CallerContext callerContext,
UserGroupInformation ugi,
org.apache.hadoop.hdfs.security.token.delegation.DelegationTokenSecretManager dtSecretManager)
Same as
HdfsAuditLogger.logAuditEvent(boolean, String, InetAddress, String, String, String,
FileStatus) with additional parameters related to logging delegation token
tracking IDs. |
abstract void |
DefaultAuditLogger.logAuditEvent(boolean succeeded,
String userName,
InetAddress addr,
String cmd,
String src,
String dst,
FileStatus status,
CallerContext callerContext,
UserGroupInformation ugi,
org.apache.hadoop.hdfs.security.token.delegation.DelegationTokenSecretManager dtSecretManager) |
abstract void |
HdfsAuditLogger.logAuditEvent(boolean succeeded,
String userName,
InetAddress addr,
String cmd,
String src,
String dst,
FileStatus stat,
UserGroupInformation ugi,
org.apache.hadoop.hdfs.security.token.delegation.DelegationTokenSecretManager dtSecretManager)
|
abstract void |
DefaultAuditLogger.logAuditEvent(boolean succeeded,
String userName,
InetAddress addr,
String cmd,
String src,
String dst,
FileStatus status,
UserGroupInformation ugi,
org.apache.hadoop.hdfs.security.token.delegation.DelegationTokenSecretManager dtSecretManager) |
Modifier and Type | Method and Description |
---|---|
static UserGroupInformation |
Server.getRemoteUser()
Returns the RPC remote user when invoked inside an RPC.
|
Modifier and Type | Method and Description |
---|---|
static UserGroupInformation |
UserGroupInformation.createProxyUser(String user,
UserGroupInformation realUser)
Create a proxy user using username of the effective user and the ugi of the
real user.
|
static UserGroupInformation |
UserGroupInformation.createProxyUserForTesting(String user,
UserGroupInformation realUser,
String[] userGroups)
Create a proxy user UGI for testing HDFS and MapReduce
|
static UserGroupInformation |
UserGroupInformation.createRemoteUser(String user)
Create a user from a login name.
|
static UserGroupInformation |
UserGroupInformation.createRemoteUser(String user,
org.apache.hadoop.security.SaslRpcServer.AuthMethod authMethod)
Create a user from a login name.
|
static UserGroupInformation |
UserGroupInformation.createUserForTesting(String user,
String[] userGroups)
Create a UGI for testing HDFS and MapReduce
|
static UserGroupInformation |
UserGroupInformation.getBestUGI(String ticketCachePath,
String user)
Find the most appropriate UserGroupInformation to use
|
static UserGroupInformation |
UserGroupInformation.getCurrentUser()
Return the current user, including any doAs in the current stack.
|
static UserGroupInformation |
UserGroupInformation.getLoginUser()
Get the currently logged in user.
|
UserGroupInformation |
UserGroupInformation.getRealUser()
get RealUser (vs.
|
static UserGroupInformation |
UserGroupInformation.getRealUserOrSelf(UserGroupInformation user)
If this is a proxy user, get the real user.
|
static UserGroupInformation |
UserGroupInformation.getUGIFromSubject(Subject subject)
Create a UserGroupInformation from a Subject with Kerberos principal.
|
static UserGroupInformation |
UserGroupInformation.getUGIFromTicketCache(String ticketCache,
String user)
Create a UserGroupInformation from a Kerberos ticket cache.
|
static UserGroupInformation |
UserGroupInformation.loginUserFromKeytabAndReturnUGI(String user,
String path)
Log a user in from a keytab file.
|
Modifier and Type | Method and Description |
---|---|
static UserGroupInformation |
UserGroupInformation.createProxyUser(String user,
UserGroupInformation realUser)
Create a proxy user using username of the effective user and the ugi of the
real user.
|
static UserGroupInformation |
UserGroupInformation.createProxyUserForTesting(String user,
UserGroupInformation realUser,
String[] userGroups)
Create a proxy user UGI for testing HDFS and MapReduce
|
static UserGroupInformation.AuthenticationMethod |
UserGroupInformation.getRealAuthenticationMethod(UserGroupInformation ugi)
Returns the authentication method of a ugi.
|
static UserGroupInformation |
UserGroupInformation.getRealUserOrSelf(UserGroupInformation user)
If this is a proxy user, get the real user.
|
static void |
UserGroupInformation.logAllUserInfo(UserGroupInformation ugi)
Log all (current, real, login) UGI and token info into UGI debug log.
|
Modifier and Type | Method and Description |
---|---|
void |
DefaultImpersonationProvider.authorize(UserGroupInformation user,
InetAddress remoteAddress) |
void |
ImpersonationProvider.authorize(UserGroupInformation user,
InetAddress remoteAddress)
Authorize the superuser which is doing doAs.
|
default void |
ImpersonationProvider.authorize(UserGroupInformation user,
String remoteAddress)
Authorize the superuser which is doing doAs.
|
boolean |
AccessControlList.isUserAllowed(UserGroupInformation ugi) |
boolean |
AccessControlList.isUserInList(UserGroupInformation ugi)
Checks if a user represented by the provided
UserGroupInformation
is a member of the Access Control List. |
Modifier and Type | Method and Description |
---|---|
abstract UserGroupInformation |
TokenIdentifier.getUser()
Get the Ugi with the username encoded in the token identifier
|
Modifier and Type | Method and Description |
---|---|
UserGroupInformation |
AbstractDelegationTokenIdentifier.getUser()
Get the username encoded in the token identifier
|
Modifier and Type | Method and Description |
---|---|
static <T> T |
NMProxy.createNMProxy(Configuration conf,
Class<T> protocol,
UserGroupInformation ugi,
org.apache.hadoop.yarn.ipc.YarnRPC rpc,
InetSocketAddress serverAddress) |
protected static <T> T |
ServerProxy.createRetriableProxy(Configuration conf,
Class<T> protocol,
UserGroupInformation user,
org.apache.hadoop.yarn.ipc.YarnRPC rpc,
InetSocketAddress serverAddress,
org.apache.hadoop.io.retry.RetryPolicy retryPolicy) |
Modifier and Type | Method and Description |
---|---|
protected void |
LogAggregationFileController.cleanOldLogs(Path remoteNodeLogFileForApp,
NodeId nodeId,
UserGroupInformation userUgi) |
void |
LogAggregationFileController.createAppDir(String user,
ApplicationId appId,
UserGroupInformation userUgi)
Create remote Application directory for log aggregation.
|
Modifier and Type | Method and Description |
---|---|
UserGroupInformation |
AccessRequest.getUser() |
UserGroupInformation |
ContainerTokenIdentifier.getUser() |
UserGroupInformation |
NMTokenIdentifier.getUser() |
UserGroupInformation |
AMRMTokenIdentifier.getUser() |
Constructor and Description |
---|
AccessRequest(org.apache.hadoop.yarn.security.PrivilegedEntity entity,
UserGroupInformation user,
org.apache.hadoop.yarn.security.AccessType accessType,
String appId,
String appName,
String remoteAddress,
List<String> forwardedAddresses) |
Modifier and Type | Method and Description |
---|---|
UserGroupInformation |
ClientToAMTokenIdentifier.getUser() |
Copyright © 2024 Apache Software Foundation. All rights reserved.