Package org.apache.hadoop.security.alias

Class LocalKeyStoreProvider

java.lang.Object

org.apache.hadoop.security.alias.CredentialProvider

org.apache.hadoop.security.alias.AbstractJavaKeyStoreProvider

org.apache.hadoop.security.alias.LocalKeyStoreProvider

Direct Known Subclasses:

LocalBouncyCastleFipsKeyStoreProvider, LocalJavaKeyStoreProvider

@Private
public abstract class LocalKeyStoreProvider
extends AbstractJavaKeyStoreProvider

CredentialProvider based on Java's KeyStore file format. The file may be stored only on the local filesystem using the following name mangling: localjceks://file/home/larry/creds.jceks -> file:///home/larry/creds.jceks

Nested Class Summary

Nested classes/interfaces inherited from class org.apache.hadoop.security.alias.CredentialProvider

CredentialProvider.CredentialEntry

Field Summary

Fields inherited from class org.apache.hadoop.security.alias.AbstractJavaKeyStoreProvider

CREDENTIAL_PASSWORD_DEFAULT, CREDENTIAL_PASSWORD_ENV_VAR, CREDENTIAL_PASSWORD_FILE_KEY, LOG

Fields inherited from class org.apache.hadoop.security.alias.CredentialProvider

CLEAR_TEXT_FALLBACK

Constructor Summary

Constructors

Modifier	Constructor	Description
protected	LocalKeyStoreProvider(URI uri, Configuration conf)

Method Summary

Modifier and Type	Method	Description
protected void	createPermissions(String perms)
void	flush()	Ensures that any changes to the credentials are written to persistent store.
protected InputStream	getInputStreamForFile()
protected OutputStream	getOutputStreamForKeystore()
protected void	initFileSystem(URI uri)
protected boolean	keystoreExists()
protected void	stashOriginalFilePermissions()

Methods inherited from class org.apache.hadoop.security.alias.AbstractJavaKeyStoreProvider

bytesToChars, createCredentialEntry, deleteCredentialEntry, getAlgorithm, getAliases, getConf, getCredentialEntry, getKeyStore, getKeyStoreType, getPassword, getPath, getPathAsString, getReadLock, getSchemeName, getUri, getWriteLock, isChanged, needsPassword, noPasswordError, noPasswordWarning, setChanged, setPassword, setPath, setReadLock, setWriteLock, toString

Methods inherited from class org.apache.hadoop.security.alias.CredentialProvider

isTransient

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Details

LocalKeyStoreProvider

protected LocalKeyStoreProvider(URI uri,
 Configuration conf)
                         throws IOException

Throws:

IOException

Method Details

getOutputStreamForKeystore

protected OutputStream getOutputStreamForKeystore()
                                           throws IOException

Specified by:

getOutputStreamForKeystore in class AbstractJavaKeyStoreProvider

Throws:

IOException

keystoreExists

protected boolean keystoreExists()
                          throws IOException

Specified by:

keystoreExists in class AbstractJavaKeyStoreProvider

Throws:

IOException

getInputStreamForFile

protected InputStream getInputStreamForFile()
                                     throws IOException

Specified by:

getInputStreamForFile in class AbstractJavaKeyStoreProvider

Throws:

IOException

createPermissions

protected void createPermissions(String perms)
                          throws IOException

Specified by:

createPermissions in class AbstractJavaKeyStoreProvider

Throws:

IOException

stashOriginalFilePermissions

protected void stashOriginalFilePermissions()
                                     throws IOException

Specified by:

stashOriginalFilePermissions in class AbstractJavaKeyStoreProvider

Throws:

IOException

initFileSystem

protected void initFileSystem(URI uri)
                       throws IOException

Overrides:

initFileSystem in class AbstractJavaKeyStoreProvider

Throws:

IOException

flush

public void flush()
           throws IOException

Description copied from class: CredentialProvider

Ensures that any changes to the credentials are written to persistent store.

Overrides:

flush in class AbstractJavaKeyStoreProvider

Throws:

IOException - raised on errors performing I/O.