## Package org.apache.hadoop.security

Interface Summary
RefreshUserMappingsProtocol: Protocol use

Class Summary
AuthenticationFilterInitializer: Initializes Alfredo AuthenticationFilter which provides support for Kerberos HTTP SPNEGO authentication.
Credentials: A class that provides the facilities of reading and writing secret keys and Tokens.
Groups: A user-to-groups mapping service.
JniBasedUnixGroupsMapping: A JNI-based implementation of `GroupMappingServiceProvider` that invokes libC calls to get the group memberships of a given user.
JniBasedUnixGroupsMappingWithFallback
JniBasedUnixGroupsNetgroupMapping: A JNI-based implementation of `GroupMappingServiceProvider` that invokes libC calls to get the group memberships of a given user.
JniBasedUnixGroupsNetgroupMappingWithFallback
KerberosName: This class implements parsing and handling of Kerberos principal names.
Krb5AndCertsSslSocketConnector: Extend Jetty's `SslSocketConnector` to optionally also provide Kerberos5ized SSL sockets.
Krb5AndCertsSslSocketConnector.Krb5SslFilter: Filter that takes the Kerberos principal identified in the `Krb5AndCertsSslSocketConnector` and provides it the to the servlet at runtime, setting the principal and short name.
NetgroupCache: Class that caches the netgroups and inverts group-to-user map to user-to-group map
SaslInputStream: A SaslInputStream is composed of an InputStream and a SaslServer (or SaslClient) so that read() methods return data that are read in from the underlying InputStream but have been additionally processed by the SaslServer (or SaslClient) object.
SaslOutputStream: A SaslOutputStream is composed of an OutputStream and a SaslServer (or SaslClient) so that write() methods first process the data before writing them out to the underlying OutputStream.
SaslRpcClient: A utility class that encapsulates SASL logic for RPC client
SaslRpcServer: A utility class for dealing with SASL on RPC server
SaslRpcServer.SaslDigestCallbackHandler: CallbackHandler for SASL DIGEST-MD5 mechanism
SaslRpcServer.SaslGssCallbackHandler: CallbackHandler for SASL GSSAPI Kerberos mechanism
SecurityUtil
SecurityUtil.QualifiedHostResolver: This an alternate resolver with important properties that the standard java resolver lacks: 1) The hostname is fully qualified.
ShellBasedUnixGroupsMapping: A simple shell-based implementation of `GroupMappingServiceProvider` that exec's the `groups` shell command to fetch the group memberships of a given user.
ShellBasedUnixGroupsNetgroupMapping: A simple shell-based implementation of `GroupMappingServiceProvider` that exec's the `groups` shell command to fetch the group memberships of a given user.
UserGroupInformation: User and group information for Hadoop.
UserGroupInformation.HadoopLoginModule: A login module that looks at the Kerberos, Unix, or Windows principal and adds the corresponding UserName.

Enum Summary
Krb5AndCertsSslSocketConnector.MODE
SaslRpcServer.AuthMethod: Authentication method
SaslRpcServer.QualityOfProtection
SaslRpcServer.SaslStatus
UserGroupInformation.AuthenticationMethod: existing types of authentications' methods

Exception Summary
AccessControlException: An exception class for access control related issues.
KerberosName.BadFormatString
KerberosName.NoMatchingRule

Annotation Types Summary
KerberosInfo: Indicates Kerberos related information to be used

Copyright © 2009 The Apache Software Foundation