org.apache.nifi.util.hive

Class HiveConfigurator

java.lang.Object

org.apache.nifi.util.hive.HiveConfigurator

public class HiveConfigurator
extends Object

Constructor Summary

Constructors

Constructor and Description
HiveConfigurator()

Method Summary

Modifier and Type	Method and Description
org.apache.hadoop.security.UserGroupInformation	authenticate(org.apache.hadoop.conf.Configuration hiveConfig, KerberosUser kerberosUser) Acquires a UserGroupInformation using the given Configuration and KerberosUser.
org.apache.hadoop.security.UserGroupInformation	authenticate(org.apache.hadoop.conf.Configuration hiveConfig, String principal, String keyTab) Deprecated. Use SecurityUtil.getUgiForKerberosUser(Configuration, KerberosUser)
org.apache.hadoop.security.UserGroupInformation	authenticate(org.apache.hadoop.conf.Configuration hiveConfig, String principal, String keyTab, long ticketRenewalPeriod) Deprecated.
org.apache.hadoop.hive.conf.HiveConf	getConfigurationFromFiles(String configFiles)
void	preload(org.apache.hadoop.conf.Configuration configuration)
Collection<ValidationResult>	validate(String configFiles, String principal, String keyTab, String password, AtomicReference<ValidationResources> validationResourceHolder, ComponentLog log)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

HiveConfigurator

public HiveConfigurator()

Method Detail

validate

public Collection<ValidationResult> validate(String configFiles,
                                             String principal,
                                             String keyTab,
                                             String password,
                                             AtomicReference<ValidationResources> validationResourceHolder,
                                             ComponentLog log)

getConfigurationFromFiles

public org.apache.hadoop.hive.conf.HiveConf getConfigurationFromFiles(String configFiles)

preload

public void preload(org.apache.hadoop.conf.Configuration configuration)

authenticate

public org.apache.hadoop.security.UserGroupInformation authenticate(org.apache.hadoop.conf.Configuration hiveConfig,
                                                                    KerberosUser kerberosUser)
                                                             throws AuthenticationFailedException

Acquires a UserGroupInformation using the given Configuration and KerberosUser.

Parameters:

hiveConfig - The Configuration to apply to the acquired UserGroupInformation

kerberosUser - The KerberosUser to authenticate

Returns:

A UserGroupInformation instance created using the Subject of the given KerberosUser

Throws:

AuthenticationFailedException - if authentication fails

See Also:

SecurityUtil.getUgiForKerberosUser(Configuration, KerberosUser)

authenticate

@Deprecated
public org.apache.hadoop.security.UserGroupInformation authenticate(org.apache.hadoop.conf.Configuration hiveConfig,
                                                                                String principal,
                                                                                String keyTab)
                                                                         throws AuthenticationFailedException

Deprecated. Use SecurityUtil.getUgiForKerberosUser(Configuration, KerberosUser)

As of Apache NiFi 1.5.0, due to changes made to SecurityUtil.loginKerberos(Configuration, String, String), which is used by this class to authenticate a principal with Kerberos, Hive controller services no longer attempt relogins explicitly. For more information, please read the documentation for SecurityUtil.loginKerberos(Configuration, String, String).

In previous versions of NiFi, a KerberosTicketRenewer was started by authenticate(Configuration, String, String, long) when the Hive controller service was enabled. The use of a separate thread to explicitly relogin could cause race conditions with the implicit relogin attempts made by hadoop/Hive code on a thread that references the same UserGroupInformation instance. One of these threads could leave the Subject in UserGroupInformation to be cleared or in an unexpected state while the other thread is attempting to use the Subject, resulting in failed authentication attempts that would leave the Hive controller service in an unrecoverable state.

Throws:

AuthenticationFailedException

See Also:

SecurityUtil.loginKerberos(Configuration, String, String)

authenticate

@Deprecated
public org.apache.hadoop.security.UserGroupInformation authenticate(org.apache.hadoop.conf.Configuration hiveConfig,
                                                                                String principal,
                                                                                String keyTab,
                                                                                long ticketRenewalPeriod)
                                                                         throws AuthenticationFailedException

Deprecated.

As of Apache NiFi 1.5.0, this method has been deprecated and is now a wrapper method which invokes authenticate(Configuration, String, String). It will no longer start a KerberosTicketRenewer to perform explicit relogins.

Throws:

AuthenticationFailedException

See Also:

authenticate(Configuration, String, String)