How to use

org.apache.hive.service.auth.HttpAuthUtils$HttpKerberosClientAction

constructor

/**
 * @return Stringified Base64 encoded kerberosAuthHeader on success
 * @throws Exception
 */
public static String getKerberosServiceTicket(String principal, String host, String serverHttpUrl,
  Subject loggedInSubject) throws Exception {
 String serverPrincipal = HadoopThriftAuthBridge.getBridge().getServerPrincipal(principal, host);
 if (loggedInSubject != null) {
  return Subject.doAs(loggedInSubject, new HttpKerberosClientAction(serverPrincipal, serverHttpUrl));
 } else {
  // JAAS login from ticket cache to setup the client UserGroupInformation
  UserGroupInformation clientUGI = HadoopThriftAuthBridge.getBridge().getCurrentUGIWithConf("kerberos");
  return clientUGI.doAs(new HttpKerberosClientAction(serverPrincipal, serverHttpUrl));
 }
}

/**
 * @return Stringified Base64 encoded kerberosAuthHeader on success
 * @throws Exception
 */
public static String getKerberosServiceTicket(String principal, String host,
  String serverHttpUrl, boolean assumeSubject) throws Exception {
 String serverPrincipal =
   ShimLoader.getHadoopThriftAuthBridge().getServerPrincipal(principal, host);
 if (assumeSubject) {
  // With this option, we're assuming that the external application,
  // using the JDBC driver has done a JAAS kerberos login already
  AccessControlContext context = AccessController.getContext();
  Subject subject = Subject.getSubject(context);
  if (subject == null) {
   throw new Exception("The Subject is not set");
  }
  return Subject.doAs(subject, new HttpKerberosClientAction(serverPrincipal, serverHttpUrl));
 } else {
  // JAAS login from ticket cache to setup the client UserGroupInformation
  UserGroupInformation clientUGI =
    ShimLoader.getHadoopThriftAuthBridge().getCurrentUGIWithConf("kerberos");
  return clientUGI.doAs(new HttpKerberosClientAction(serverPrincipal, serverHttpUrl));
 }
}

/**
 * @return Stringified Base64 encoded kerberosAuthHeader on success
 * @throws Exception
 */
public static String getKerberosServiceTicket(String principal, String host,
  String serverHttpUrl, boolean assumeSubject) throws Exception {
 String serverPrincipal =
   ShimLoader.getHadoopThriftAuthBridge().getServerPrincipal(principal, host);
 if (assumeSubject) {
  // With this option, we're assuming that the external application,
  // using the JDBC driver has done a JAAS kerberos login already
  AccessControlContext context = AccessController.getContext();
  Subject subject = Subject.getSubject(context);
  if (subject == null) {
   throw new Exception("The Subject is not set");
  }
  return Subject.doAs(subject, new HttpKerberosClientAction(serverPrincipal, serverHttpUrl));
 } else {
  // JAAS login from ticket cache to setup the client UserGroupInformation
  UserGroupInformation clientUGI =
    ShimLoader.getHadoopThriftAuthBridge().getCurrentUGIWithConf("kerberos");
  return clientUGI.doAs(new HttpKerberosClientAction(serverPrincipal, serverHttpUrl));
 }
}

/**
 * @return Stringified Base64 encoded kerberosAuthHeader on success
 * @throws Exception
 */
public static String getKerberosServiceTicket(String principal, String host,
  String serverHttpUrl, boolean assumeSubject) throws Exception {
 String serverPrincipal =
   ShimLoader.getHadoopThriftAuthBridge().getServerPrincipal(principal, host);
 if (assumeSubject) {
  // With this option, we're assuming that the external application,
  // using the JDBC driver has done a JAAS kerberos login already
  AccessControlContext context = AccessController.getContext();
  Subject subject = Subject.getSubject(context);
  if (subject == null) {
   throw new Exception("The Subject is not set");
  }
  return Subject.doAs(subject, new HttpKerberosClientAction(serverPrincipal, serverHttpUrl));
 } else {
  // JAAS login from ticket cache to setup the client UserGroupInformation
  UserGroupInformation clientUGI =
    ShimLoader.getHadoopThriftAuthBridge().getCurrentUGIWithConf("kerberos");
  return clientUGI.doAs(new HttpKerberosClientAction(serverPrincipal, serverHttpUrl));
 }
}

/**
 * @return Stringified Base64 encoded kerberosAuthHeader on success
 * @throws Exception
 */
public static String getKerberosServiceTicket(String principal, String host,
  String serverHttpUrl, boolean assumeSubject) throws Exception {
 String serverPrincipal =
   ShimLoader.getHadoopThriftAuthBridge().getServerPrincipal(principal, host);
 if (assumeSubject) {
  // With this option, we're assuming that the external application,
  // using the JDBC driver has done a JAAS kerberos login already
  AccessControlContext context = AccessController.getContext();
  Subject subject = Subject.getSubject(context);
  if (subject == null) {
   throw new Exception("The Subject is not set");
  }
  return Subject.doAs(subject, new HttpKerberosClientAction(serverPrincipal, serverHttpUrl));
 } else {
  // JAAS login from ticket cache to setup the client UserGroupInformation
  UserGroupInformation clientUGI =
    ShimLoader.getHadoopThriftAuthBridge().getCurrentUGIWithConf("kerberos");
  return clientUGI.doAs(new HttpKerberosClientAction(serverPrincipal, serverHttpUrl));
 }
}

/**
 * @return Stringified Base64 encoded kerberosAuthHeader on success
 * @throws Exception
 */
public static String getKerberosServiceTicket(String principal, String host, String serverHttpUrl,
  Subject loggedInSubject) throws Exception {
 String serverPrincipal = HadoopThriftAuthBridge.getBridge().getServerPrincipal(principal, host);
 if (loggedInSubject != null) {
  return Subject.doAs(loggedInSubject, new HttpKerberosClientAction(serverPrincipal, serverHttpUrl));
 } else {
  // JAAS login from ticket cache to setup the client UserGroupInformation
  UserGroupInformation clientUGI = HadoopThriftAuthBridge.getBridge().getCurrentUGIWithConf("kerberos");
  return clientUGI.doAs(new HttpKerberosClientAction(serverPrincipal, serverHttpUrl));
 }
}