org.apache.drill.exec.rpc.user.security

Class TestUserBitKerberosEncryption

java.lang.Object

DrillTest

org.apache.drill.exec.ExecTest

org.apache.drill.test.BaseTestQuery

org.apache.drill.exec.rpc.user.security.TestUserBitKerberosEncryption

public class TestUserBitKerberosEncryption
extends BaseTestQuery

Nested Class Summary

Nested classes/interfaces inherited from class org.apache.drill.test.BaseTestQuery

BaseTestQuery.ClassicTestServices, BaseTestQuery.SilentListener, BaseTestQuery.TestResultSet

Field Summary

Fields inherited from class org.apache.drill.test.BaseTestQuery

allocator, bits, client, config, serviceSet

Fields inherited from class org.apache.drill.exec.ExecTest

c, dirTestWatcher, optionManager

Constructor Summary

Constructors

Constructor and Description
TestUserBitKerberosEncryption()

Method Summary

Modifier and Type	Method and Description
static void	cleanTest()
void	clientNeedsEncryptionWithNoServerSupport() Test to validate that clients which needs encrypted connection fails to connect to server with encryption disabled.
void	clientNeedsEncryptionWithServerSupport() Test to validate that clients which needs encrypted connection connects to server with encryption enabled.
void	encryptionEnabledWithOnlyPlainMech()
void	failureOldClientEncryptionEnabled() Test to validate that older clients are not allowed to connect to secure cluster with encryption enabled.
void	failurePlainMech()
static void	setupTest()
void	successEncryptionAllChannel() This test will not cover the data channel since we are using only 1 Drillbit and the query doesn't involve any exchange operator.
void	successEncryptionAllChannelChunkMode() This test will not cover the data channel since we are using only 1 Drillbit and the query doesn't involve any exchange operator.
void	successKeytabWithChunking()
void	successKeytabWithChunkingDefaultChunkSize()
void	successKeytabWithoutChunking()
void	successOldClientEncryptionDisabled() Test to validate that older clients are successfully connecting to secure cluster with encryption disabled.
void	successTicketWithoutChunking()
void	testConnectionCounters() Test connection counter values for both encrypted and unencrypted connections over all Drillbit channels.
void	testEncryptedConnectionCountersAllChannel() Test connection counter values for both encrypted and unencrypted connections over all Drillbit channels.

Methods inherited from class org.apache.drill.test.BaseTestQuery

alterSession, cloneDefaultTestConfigProperties, closeClient, errorMsgTestHelper, getAllocator, getDrillbitContext, getFile, getPhysicalFileFromResource, getResultString, getUserPort, logResult, newTest, parseErrorHelper, printResult, resetAllSessionOptions, resetDrillbitCount, resetSessionOption, runSQL, setColumnWidth, setColumnWidths, setSessionOption, setSessionOption, setSessionOption, setSessionOption, setupDefaultTestCluster, test, test, testBuilder, testLogicalWithResults, testNoResult, testNoResult, testPhysical, testPhysicalFromFile, testPhysicalWithResults, testPreparedStatement, testRunAndPrint, testRunAndReturn, testSql, testSqlWithResults, testWithListener, updateClient, updateClient, updateClient, updateTestCluster, updateTestCluster

Methods inherited from class org.apache.drill.exec.ExecTest

clear, getLocalFileSystem, mockDrillbitContext, mockUsDateFormatSymbols, mockUtcDateTimeZone, parseExpr, setupOptionManager

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

TestUserBitKerberosEncryption

public TestUserBitKerberosEncryption()

Method Detail

setupTest

public static void setupTest()
                      throws Exception

Throws:

Exception

cleanTest

public static void cleanTest()
                      throws Exception

Throws:

Exception

successKeytabWithoutChunking

public void successKeytabWithoutChunking()
                                  throws Exception

Throws:

Exception

testConnectionCounters

public void testConnectionCounters()
                            throws Exception

Test connection counter values for both encrypted and unencrypted connections over all Drillbit channels. Encryption is enabled only for UserRpc NOT for ControlRpc and DataRpc. Test validates corresponding connection count for each channel. For example: There is only 1 DrillClient so encrypted connection count of UserRpcMetrics will be 1. Before running any query there should not be any connection (control or data) between Drillbits, hence those counters are 0. After running a simple query since there is only 1 fragment which is root fragment the Control Connection count is 0 (for unencrypted counter) since with DRILL-5721 status update of fragment to Foreman happens locally. There is no Data Connection because there is no data exchange between multiple fragments.

Throws:

Exception

successTicketWithoutChunking

public void successTicketWithoutChunking()
                                  throws Exception

Throws:

Exception

successKeytabWithChunking

public void successKeytabWithChunking()
                               throws Exception

Throws:

Exception

successKeytabWithChunkingDefaultChunkSize

public void successKeytabWithChunkingDefaultChunkSize()
                                               throws Exception

Throws:

Exception

successEncryptionAllChannelChunkMode

public void successEncryptionAllChannelChunkMode()
                                          throws Exception

This test will not cover the data channel since we are using only 1 Drillbit and the query doesn't involve any exchange operator. But Data Channel encryption testing is covered separately in TestBitBitKerberos

Throws:

Exception

successEncryptionAllChannel

public void successEncryptionAllChannel()
                                 throws Exception

This test will not cover the data channel since we are using only 1 Drillbit and the query doesn't involve any exchange operator. But Data Channel encryption testing is covered separately in TestBitBitKerberos

Throws:

Exception

testEncryptedConnectionCountersAllChannel

public void testEncryptedConnectionCountersAllChannel()
                                               throws Exception

Test connection counter values for both encrypted and unencrypted connections over all Drillbit channels. Encryption is enabled for UserRpc, ControlRpc and DataRpc. Test validates corresponding connection count for each channel. For example: There is only 1 DrillClient so encrypted connection count of UserRpcMetrics will be 1. Before running any query there should not be any connection (control or data) between Drillbits, hence those counters are 0. After running a simple query since there is only 1 fragment which is root fragment the Control Connection count is 0 (for encrypted counter), since with DRILL-5721 status update of fragment to Foreman happens locally. There is no Data Connection because there is no data exchange between multiple fragments.

Throws:

Exception

failurePlainMech

public void failurePlainMech()

encryptionEnabledWithOnlyPlainMech

public void encryptionEnabledWithOnlyPlainMech()

failureOldClientEncryptionEnabled

public void failureOldClientEncryptionEnabled()

Test to validate that older clients are not allowed to connect to secure cluster with encryption enabled.

successOldClientEncryptionDisabled

public void successOldClientEncryptionDisabled()

Test to validate that older clients are successfully connecting to secure cluster with encryption disabled.

clientNeedsEncryptionWithNoServerSupport

public void clientNeedsEncryptionWithNoServerSupport()
                                              throws Exception

Test to validate that clients which needs encrypted connection fails to connect to server with encryption disabled.

Throws:

Exception

clientNeedsEncryptionWithServerSupport

public void clientNeedsEncryptionWithServerSupport()
                                            throws Exception

Test to validate that clients which needs encrypted connection connects to server with encryption enabled.

Throws:

Exception