org.apache.gravitino.auth

Class KerberosUtils

java.lang.Object

org.apache.gravitino.auth.KerberosUtils

public class KerberosUtils
extends java.lang.Object

Utility class for Kerberos related tests.

Field Summary

Fields

Modifier and Type	Field and Description
static org.ietf.jgss.Oid	GSS_KRB5_MECH_OID Oid instance for Kerberos mechanism.
static org.ietf.jgss.Oid	GSS_SPNEGO_MECH_OID Oid instance for Kerberos spnego mechanism.
static org.ietf.jgss.Oid	NT_GSS_KRB5_PRINCIPAL_OID Oid instance for Kerberos principal name.

Method Summary

Modifier and Type	Method and Description
static <T> T	doAs(javax.security.auth.Subject subject, java.util.concurrent.Callable<T> callable) Execute the given action as the given subject.
static java.lang.String	getKrb5LoginModuleName()
static javax.security.auth.login.LoginContext	login(java.lang.String principal, java.lang.String keyTabFile) Login to KDC using principal and keytab file.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

GSS_SPNEGO_MECH_OID

public static final org.ietf.jgss.Oid GSS_SPNEGO_MECH_OID

Oid instance for Kerberos spnego mechanism.

GSS_KRB5_MECH_OID

public static final org.ietf.jgss.Oid GSS_KRB5_MECH_OID

Oid instance for Kerberos mechanism.

NT_GSS_KRB5_PRINCIPAL_OID

public static final org.ietf.jgss.Oid NT_GSS_KRB5_PRINCIPAL_OID

Oid instance for Kerberos principal name.

Method Detail

login

public static javax.security.auth.login.LoginContext login(java.lang.String principal,
                                                           java.lang.String keyTabFile)
                                                    throws javax.security.auth.login.LoginException

Login to KDC using principal and keytab file.

Parameters:

principal - The principal name

keyTabFile - The keytab file

Returns:

The login context

Throws:

javax.security.auth.login.LoginException - If login fails, or if the principal and keytab file are invalid.

doAs

public static <T> T doAs(javax.security.auth.Subject subject,
                         java.util.concurrent.Callable<T> callable)
                  throws java.lang.Exception

Execute the given action as the given subject.

Type Parameters:

T - The return type of the action

Parameters:

subject - The subject to execute the action as.

callable - The action to execute.

Returns:

The result of the action

Throws:

java.lang.Exception - If the action throws an exception

getKrb5LoginModuleName

public static java.lang.String getKrb5LoginModuleName()

Returns:

The Kerberos login module name.