Example usage for org.apache.hadoop.security.authorize ServiceAuthorizationManager ServiceAuthorizationManager

List of usage examples for org.apache.hadoop.security.authorize ServiceAuthorizationManager ServiceAuthorizationManager

Introduction

In this page you can find the example usage for org.apache.hadoop.security.authorize ServiceAuthorizationManager ServiceAuthorizationManager.

Prototype

ServiceAuthorizationManager

Source Link

Usage

From source file:org.apache.hama.ipc.Server.java

License:Apache License

/**
 * Authorize the incoming client connection.
 * /*from   w  w w  .  java2  s . c o  m*/
 * @param user client user
 * @param connection incoming connection
 * @param addr InetAddress of incoming connection
 * @throws AuthorizationException when the client isn't authorized to talk the
 *           protocol
 */
@SuppressWarnings("static-access")
public void authorize(UserGroupInformation user, ConnectionHeader connection, InetAddress addr)
        throws AuthorizationException {
    if (authorize) {
        Class<?> protocol = null;
        try {
            protocol = getProtocolClass(connection.getProtocol(), getConf());
        } catch (ClassNotFoundException cfne) {
            throw new AuthorizationException("Unknown protocol: " + connection.getProtocol());
        }
        ServiceAuthorizationManager authManager = new ServiceAuthorizationManager();
        authManager.authorize(user, protocol, getConf(), addr);
    }
}

From source file:probos.TestStaticMethods.java

License:Open Source License

@Test
public void testPolicy() throws Exception {
    Configuration c = new Configuration();
    ServiceAuthorizationManager sam = new ServiceAuthorizationManager();
    System.setProperty("hadoop.policy.file", "probos-policy.xml");
    sam.refreshWithLoadedConfiguration(c, new ControllerPolicyProvider());
    AccessControlList acl = sam.getProtocolsAcls(PBSClient.class);
    assertNotNull(acl);//from w ww .j ava 2 s  . com
    assertEquals("*", acl.getAclString());
    assertTrue(acl
            .isUserAllowed(UserGroupInformation.createUserForTesting("testUser", new String[] { "mygroup" })));
    sam.authorize(UserGroupInformation.getCurrentUser(), PBSClient.class, c, InetAddress.getLocalHost());
}