大數據培訓_安全認證原理和認證機制

　　原理架構

?

　　通過HDFS提供的接口獲?。ň唧w接口信息可以參考HDFS二次開發指南）。

private Boolean login(Configuration conf){

   boolean flag = false;

   UserGroupInformation.setConfiguration(conf);

     try {

        UserGroupInformation.loginUserFromKeytab(conf.get(PRINCIPAL),conf.get(KEYTAB));

        System.out.println("UserGroupInformation.isLoginKeytabBased():" +UserGroupInformation.isLoginKeytabBased());

   flag = true;

         } catch (IOException e) {

   e.printStackTrace();

         }

   return flag;

         }

　　認證代碼實例講解?

private  void init() throws IOException {  

        Configuration conf = new Configuration();  

        // conf file  

        conf.addResource(new Path(System.getProperty("user.dir")  

                + File.separator + "conf" + File.separator + "hdfs-site.xml"));  

        conf.addResource(new Path(System.getProperty("user.dir")  

                + File.separator + "conf" + File.separator + "core-site.xml"));  

        // security mode  

        if ("kerberos".equalsIgnoreCase(conf  

                .get("hadoop.security.authentication"))) {  

            // 注[1]  

            conf.set(PRINCIPAL, "hdfstest@HADOOP.COM");  

            // keytab file  

            conf.set(KEYTAB, System.getProperty("user.dir") + File.separator  

                    + "conf" + File.separator + "user.keytab");  

            // kerberos path  

            String krbfilepath = System.getProperty("user.dir")  

                    + File.separator + "conf" + File.separator + "krb5.conf";  

            System.setProperty("java.security.krb5.conf", krbfilepath);  

            login(conf); //注[2]

        }  

        // get filesystem  

        try {  

            fSystem = FileSystem.get(conf); //注[3]

        } catch (IOException e) {  

            throw new IOException("Get fileSystem failed.");  

        }  

    }

private Boolean login(Configuration conf){  

    boolean flag = false;  

    UserGroupInformation.setConfiguration(conf);  

    try {  

      UserGroupInformation.loginUserFromKeytab(conf.get(PRINCIPAL), conf.get(KEYTAB));  

      System.out.println("UserGroupInformation.isLoginKeytabBased(): " +UserGroupInformation.isLoginKeytabBased());  

      flag = true;  

    } catch (IOException e) {  

      e.printStackTrace();  

    }  

    return flag;  

  }