com.hortonworks.registries.auth.server

Class KerberosBasicAuthenticationHandler

java.lang.Object

com.hortonworks.registries.auth.server.KerberosAuthenticationHandler

com.hortonworks.registries.auth.server.KerberosBasicAuthenticationHandler

All Implemented Interfaces:

AuthenticationHandler

public class KerberosBasicAuthenticationHandler
extends KerberosAuthenticationHandler

The KerberosBasicAuthenticationHandler augments the Kerberos SPNEGO authentication mechanism with the Kerberos Basic Login authentication mechanism. If a user provides user credentials in a HTTPS, POST call, then a Kerberos login is attempted. In the authentication failure scenario, the SPNEGO sequence is invoked.

The supported configuration properties that are required in addition to those required by KerberosAuthenticationHandler are:

• login.enabled: a boolean string to indicate whether the enabling of Kerberos login.

Field Summary

Fields

Modifier and Type	Field and Description
static java.lang.String	AUTHORIZATION_HEADER
static java.lang.String	BASIC_AUTHENTICATION
static java.lang.String	LOGIN_ENABLED_CONFIG
static java.lang.String	SPNEGO_ENABLED_CONFIG
static java.lang.String	TYPE

Fields inherited from class com.hortonworks.registries.auth.server.KerberosAuthenticationHandler

DOAS_QUERY_STRING, ENABLE_TRUSTED_PROXY, KEYTAB, LOAD_BALANCER_PRINCIPAL, NAME_RULES, PRINCIPAL, QUERY_STRING_DELIMITER

Fields inherited from interface com.hortonworks.registries.auth.server.AuthenticationHandler

JWT_SSO_ENABLED, NON_BROWSER_USER_AGENTS, NON_BROWSER_USER_AGENTS_DEFAULT, WWW_AUTHENTICATE

Method Summary

Modifier and Type	Method and Description
AuthenticationToken	authenticate(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response) Perform Basic authentication through Kerberos, if the authentication fails, delegates to KerberosAuthenticationHandler for SPNEGO exchange.
void	destroy() Releases any resources initialized by the authentication handler.
java.lang.String	getType() Returns the authentication type of the authentication handler, 'kerberos'.
void	init(java.util.Properties config) Initializes the authentication handler instance.

Methods inherited from class com.hortonworks.registries.auth.server.KerberosAuthenticationHandler

getDoasUser, getKeytab, getPrincipals, setNonBrowserUserAgents, shouldAuthenticate

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

LOGIN_ENABLED_CONFIG

public static final java.lang.String LOGIN_ENABLED_CONFIG

See Also:

Constant Field Values

SPNEGO_ENABLED_CONFIG

public static final java.lang.String SPNEGO_ENABLED_CONFIG

See Also:

Constant Field Values

TYPE

public static final java.lang.String TYPE

See Also:

Constant Field Values

AUTHORIZATION_HEADER

public static final java.lang.String AUTHORIZATION_HEADER

See Also:

Constant Field Values

BASIC_AUTHENTICATION

public static final java.lang.String BASIC_AUTHENTICATION

See Also:

Constant Field Values

Method Detail

getType

public java.lang.String getType()

Description copied from class: KerberosAuthenticationHandler

Returns the authentication type of the authentication handler, 'kerberos'.

Specified by:

getType in interface AuthenticationHandler

Overrides:

getType in class KerberosAuthenticationHandler

Returns:

the authentication type of the authentication handler, 'kerberos'.

init

public void init(java.util.Properties config)
          throws javax.servlet.ServletException

Description copied from class: KerberosAuthenticationHandler

Initializes the authentication handler instance.

It creates a Kerberos context using the principal and keytab specified in the configuration.

This method is invoked by the AuthenticationFilter.init(javax.servlet.FilterConfig) method.

Specified by:

init in interface AuthenticationHandler

Overrides:

init in class KerberosAuthenticationHandler

Parameters:

config - configuration properties to initialize the handler.

Throws:

javax.servlet.ServletException - thrown if the handler could not be initialized.

destroy

public void destroy()

Description copied from class: KerberosAuthenticationHandler

Releases any resources initialized by the authentication handler.

It destroys the Kerberos context.

Specified by:

destroy in interface AuthenticationHandler

Overrides:

destroy in class KerberosAuthenticationHandler

authenticate

public AuthenticationToken authenticate(javax.servlet.http.HttpServletRequest request,
                                        javax.servlet.http.HttpServletResponse response)
                                 throws java.io.IOException,
                                        AuthenticationException

Perform Basic authentication through Kerberos, if the authentication fails, delegates to KerberosAuthenticationHandler for SPNEGO exchange.

Specified by:

authenticate in interface AuthenticationHandler

Overrides:

authenticate in class KerberosAuthenticationHandler

Parameters:

request - the HTTP client request.

response - the HTTP client response.

Returns:

an authentication token if the request is authorized or null

Throws:

java.io.IOException

AuthenticationException