org.apache.hadoop.security (Apache Hadoop Common 3.5.0 API)
Description: declaration: package: org.apache.hadoop.security

# Package org.apache.hadoop.security

@LimitedPrivate({"HDFS","MapReduce","YARN","HBase"}) package org.apache.hadoop.security
Classes for hadoop security.

- Related Packages
  Package
  Description
  org.apache.hadoop
  org.apache.hadoop.security.alias
  Provides the hadoop credential provider API.
  org.apache.hadoop.security.authorize
  Support for service-level authorization.
  org.apache.hadoop.security.http
  Filters for HTTP service security.
  org.apache.hadoop.security.protocolPB
  org.apache.hadoop.security.ssl
  org.apache.hadoop.security.token
  Support for delegation tokens.
- Class
  Description
  AccessControlException
  An exception class for access control related issues.
  AnnotatedSecurityInfo
  Constructs SecurityInfo from Annotations provided in protocol interface.
  AuthenticationFilterInitializer
  Initializes hadoop-auth AuthenticationFilter which provides support for Kerberos HTTP SPNEGO authentication.
  AuthorizationContext
  Utility for managing a thread-local authorization header for RPC calls.
  CompositeGroupsMapping
  An implementation of `GroupMappingServiceProvider` which composites other group mapping providers for determining group membership.
  Credentials
  A class that provides the facilities of reading and writing secret keys and Tokens.
  Credentials.SerializedFormat
  CustomizedCallbackHandler
  For handling customized `Callback`.
  CustomizedCallbackHandler.Cache
  CustomizedCallbackHandler.DefaultHandler
  FastSaslClientFactory
  Class for dealing with caching SASL client factories.
  FastSaslServerFactory
  Class for dealing with caching SASL server factories.
  GroupMappingServiceProvider
  An interface for the implementation of a user-to-groups mapping service used by `Groups`.
  Groups
  A user-to-groups mapping service.
  HadoopKerberosName
  This class implements parsing and handling of Kerberos principal names.
  HttpCrossOriginFilterInitializer
  IdMappingConstant
  Some constants for IdMapping
  IdMappingServiceProvider
  An interface for the implementation of <userId, userName> mapping and <groupId, groupName> mapping.
  IngressPortBasedResolver
  An implementation of SaslPropertiesResolver.
  JniBasedUnixGroupsMapping
  A JNI-based implementation of `GroupMappingServiceProvider` that invokes libC calls to get the group memberships of a given user.
  JniBasedUnixGroupsMappingWithFallback
  JniBasedUnixGroupsNetgroupMapping
  A JNI-based implementation of `GroupMappingServiceProvider` that invokes libC calls to get the group memberships of a given user.
  JniBasedUnixGroupsNetgroupMappingWithFallback
  KDiag
  Kerberos diagnostics This operation expands some of the diagnostic output of the security code, but not all.
  KDiag.KerberosDiagsFailure
  Diagnostics failures return the exit code 41, "unauthorized".
  KerberosAuthException
  Thrown when `UserGroupInformation` failed with an unrecoverable error, such as failure in kerberos login/logout, invalid subject etc.
  KerberosInfo
  Indicates Kerberos related information to be used
  LdapGroupsMapping
  An implementation of `GroupMappingServiceProvider` which connects directly to an LDAP server for determining group membership.
  LdapGroupsMapping.LdapSslSocketFactory
  An private internal socket factory used to create SSL sockets with custom configuration.
  NetgroupCache
  Class that caches the netgroups and inverts group-to-user map to user-to-group map, primarily intended for use with netgroups (as returned by getent netgrgoup) which only returns group to user mapping.
  NullGroupsMapping
  This class provides groups mapping for `UserGroupInformation` when the user group information will not be used.
  ProviderUtils
  Utility methods for both key and credential provider APIs.
  RefreshUserMappingsProtocol
  Protocol use
  RuleBasedLdapGroupsMapping
  This class uses `LdapGroupsMapping` for group lookup and applies the rule configured on the group names.
  SaslInputStream
  A SaslInputStream is composed of an InputStream and a SaslServer (or SaslClient) so that read() methods return data that are read in from the underlying InputStream but have been additionally processed by the SaslServer (or SaslClient) object.
  SaslMechanismFactory
  SASL related constants.
  SaslOutputStream
  A SaslOutputStream is composed of an OutputStream and a SaslServer (or SaslClient) so that write() methods first process the data before writing them out to the underlying OutputStream.
  SaslPlainServer
  SaslPlainServer.SaslPlainServerFactory
  SaslPlainServer.SecurityProvider
  SaslPropertiesResolver
  Provides SaslProperties to be used for a connection.
  SaslRpcClient
  A utility class that encapsulates SASL logic for RPC client
  SaslRpcServer
  A utility class for dealing with SASL on RPC server
  SaslRpcServer.AuthMethod
  Authentication method
  SaslRpcServer.QualityOfProtection
  SaslRpcServer.SaslDigestCallbackHandler
  CallbackHandler for SASL mechanism.
  SaslRpcServer.SaslGssCallbackHandler
  CallbackHandler for SASL GSSAPI Kerberos mechanism
  SecurityInfo
  SecurityUtil
  Security Utils.
  SecurityUtil.QualifiedHostResolver
  This an alternate resolver with important properties that the standard java resolver lacks: 1) The hostname is fully qualified.
  SecurityUtil.TruststoreKeystore
  Helper class to contain the Truststore/Keystore paths for the ZK client connection over SSL/TLS.
  ShellBasedIdMapping
  A simple shell-based implementation of `IdMappingServiceProvider` Map id to user name or group name.
  ShellBasedUnixGroupsMapping
  A simple shell-based implementation of `GroupMappingServiceProvider` that exec's the `groups` shell command to fetch the group memberships of a given user.
  ShellBasedUnixGroupsNetgroupMapping
  A simple shell-based implementation of `GroupMappingServiceProvider` that exec's the `groups` shell command to fetch the group memberships of a given user.
  UserGroupInformation
  User and group information for Hadoop.
  UserGroupInformation.AuthenticationMethod
  existing types of authentications' methods
  UserGroupInformation.HadoopLoginModule
  A login module that looks at the Kerberos, Unix, or Windows principal and adds the corresponding UserName.
  WhitelistBasedResolver
  An implementation of the SaslPropertiesResolver.