Package alluxio.security.authentication
Class ImpersonationAuthenticator
- java.lang.Object
-
- alluxio.security.authentication.ImpersonationAuthenticator
-
@ThreadSafe public final class ImpersonationAuthenticator extends java.lang.Object
An authenticator for impersonation users. This determines if a connection user (the user making the connection) is configured to impersonate as a separate impersonation user. To enable impersonation for a particular connection user, the configuration parameter templatesPropertyKey.Template.MASTER_IMPERSONATION_USERS_OPTION
and/orPropertyKey.Template.MASTER_IMPERSONATION_GROUPS_OPTION
must be used to specify the users and groups the connection user is allowed to impersonate.
-
-
Field Summary
Fields Modifier and Type Field Description static java.lang.String
WILDCARD
-
Constructor Summary
Constructors Constructor Description ImpersonationAuthenticator(AlluxioConfiguration conf)
Constructs a newImpersonationAuthenticator
.
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description void
authenticate(java.lang.String connectionUser, java.lang.String impersonationUser)
-
-
-
Field Detail
-
WILDCARD
public static final java.lang.String WILDCARD
- See Also:
- Constant Field Values
-
-
Constructor Detail
-
ImpersonationAuthenticator
public ImpersonationAuthenticator(AlluxioConfiguration conf)
Constructs a newImpersonationAuthenticator
. Note the constructor for this object is expensive. Take care with how many of these are instantiated.- Parameters:
conf
- conf Alluxio configuration
-
-
Method Detail
-
authenticate
public void authenticate(java.lang.String connectionUser, java.lang.String impersonationUser) throws javax.security.sasl.AuthenticationException
- Parameters:
connectionUser
- the user of the connectionimpersonationUser
- the user to impersonate- Throws:
javax.security.sasl.AuthenticationException
- if the connectionUser is not allowed to impersonate the impersonationUser
-
-