alluxio.security.authentication

Class ImpersonationAuthenticator

java.lang.Object

alluxio.security.authentication.ImpersonationAuthenticator

@ThreadSafe
public final class ImpersonationAuthenticator
extends Object

An authenticator for impersonation users. This determines if a connection user (the user making the connection) is configured to impersonate as a separate impersonation user. To enable impersonation for a particular connection user, the configuration parameter templates PropertyKey.Template#MASTER_IMPERSONATION_USERS_OPTION and/or PropertyKey.Template#MASTER_IMPERSONATION_GROUPS_OPTION must be used to specify the users and groups the connection user is allowed to impersonate.

Field Summary

Fields

Modifier and Type	Field and Description
static String	WILDCARD

Constructor Summary

Constructors

Constructor and Description
ImpersonationAuthenticator(AlluxioConfiguration conf) Constructs a new ImpersonationAuthenticator.

Method Summary

Modifier and Type	Method and Description
void	authenticate(String connectionUser, String impersonationUser)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

WILDCARD

public static final String WILDCARD

See Also:

Constant Field Values

Constructor Detail

ImpersonationAuthenticator

public ImpersonationAuthenticator(AlluxioConfiguration conf)

Constructs a new ImpersonationAuthenticator. Note the constructor for this object is expensive. Take care with how many of these are instantiated.

Parameters:

conf - conf Alluxio configuration

Method Detail

authenticate

public void authenticate(String connectionUser,
                         String impersonationUser)
                  throws AuthenticationException

Parameters:

connectionUser - the user of the connection

impersonationUser - the user to impersonate

Throws:

AuthenticationException - if the connectionUser is not allowed to impersonate the impersonationUser