|
@@ -21,7 +21,6 @@ package org.apache.hadoop.hdfs;
|
|
import static
|
|
import static
|
|
org.apache.hadoop.fs.CommonConfigurationKeys.HADOOP_SECURITY_AUTHENTICATION;
|
|
org.apache.hadoop.fs.CommonConfigurationKeys.HADOOP_SECURITY_AUTHENTICATION;
|
|
|
|
|
|
-import java.io.IOException;
|
|
|
|
import java.lang.reflect.Field;
|
|
import java.lang.reflect.Field;
|
|
import java.net.URI;
|
|
import java.net.URI;
|
|
import java.security.PrivilegedExceptionAction;
|
|
import java.security.PrivilegedExceptionAction;
|
|
@@ -74,58 +73,34 @@ public class TestHftpDelegationToken {
|
|
SecurityUtilTestHelper.setTokenServiceUseIp(true);
|
|
SecurityUtilTestHelper.setTokenServiceUseIp(true);
|
|
|
|
|
|
Configuration conf = new Configuration();
|
|
Configuration conf = new Configuration();
|
|
- conf.setClass("fs.hftp.impl", MyHftpFileSystem.class, FileSystem.class);
|
|
|
|
|
|
+ URI hftpUri = URI.create("hftp://localhost:0");
|
|
|
|
+ UserGroupInformation ugi = UserGroupInformation.getCurrentUser();
|
|
|
|
+ Token<?> token = null;
|
|
|
|
|
|
- // test with implicit default port
|
|
|
|
- URI fsUri = URI.create("hftp://localhost");
|
|
|
|
- MyHftpFileSystem fs = (MyHftpFileSystem) FileSystem.get(fsUri, conf);
|
|
|
|
- checkTokenSelection(fs, conf);
|
|
|
|
-
|
|
|
|
- // test with explicit default port
|
|
|
|
- fsUri = URI.create("hftp://localhost:"+fs.getDefaultPort());
|
|
|
|
- fs = (MyHftpFileSystem) FileSystem.get(fsUri, conf);
|
|
|
|
- checkTokenSelection(fs, conf);
|
|
|
|
-
|
|
|
|
- // test with non-default port
|
|
|
|
- fsUri = URI.create("hftp://localhost:"+(fs.getDefaultPort()-1));
|
|
|
|
- fs = (MyHftpFileSystem) FileSystem.get(fsUri, conf);
|
|
|
|
- checkTokenSelection(fs, conf);
|
|
|
|
-
|
|
|
|
- }
|
|
|
|
-
|
|
|
|
- private void checkTokenSelection(MyHftpFileSystem fs,
|
|
|
|
- Configuration conf) throws IOException {
|
|
|
|
- int port = fs.getCanonicalUri().getPort();
|
|
|
|
- UserGroupInformation ugi =
|
|
|
|
- UserGroupInformation.createUserForTesting(fs.getUri().getAuthority(), new String[]{});
|
|
|
|
-
|
|
|
|
- // use ip-based tokens
|
|
|
|
- SecurityUtilTestHelper.setTokenServiceUseIp(true);
|
|
|
|
-
|
|
|
|
// test fallback to hdfs token
|
|
// test fallback to hdfs token
|
|
Token<?> hdfsToken = new Token<TokenIdentifier>(
|
|
Token<?> hdfsToken = new Token<TokenIdentifier>(
|
|
new byte[0], new byte[0],
|
|
new byte[0], new byte[0],
|
|
DelegationTokenIdentifier.HDFS_DELEGATION_KIND,
|
|
DelegationTokenIdentifier.HDFS_DELEGATION_KIND,
|
|
new Text("127.0.0.1:8020"));
|
|
new Text("127.0.0.1:8020"));
|
|
ugi.addToken(hdfsToken);
|
|
ugi.addToken(hdfsToken);
|
|
-
|
|
|
|
- // test fallback to hdfs token
|
|
|
|
- Token<?> token = fs.selectDelegationToken(ugi);
|
|
|
|
|
|
+
|
|
|
|
+ HftpFileSystem fs = (HftpFileSystem) FileSystem.get(hftpUri, conf);
|
|
|
|
+ token = fs.selectDelegationToken();
|
|
assertNotNull(token);
|
|
assertNotNull(token);
|
|
assertEquals(hdfsToken, token);
|
|
assertEquals(hdfsToken, token);
|
|
-
|
|
|
|
|
|
+
|
|
// test hftp is favored over hdfs
|
|
// test hftp is favored over hdfs
|
|
Token<?> hftpToken = new Token<TokenIdentifier>(
|
|
Token<?> hftpToken = new Token<TokenIdentifier>(
|
|
new byte[0], new byte[0],
|
|
new byte[0], new byte[0],
|
|
- HftpFileSystem.TOKEN_KIND, new Text("127.0.0.1:"+port));
|
|
|
|
|
|
+ HftpFileSystem.TOKEN_KIND, new Text("127.0.0.1:0"));
|
|
ugi.addToken(hftpToken);
|
|
ugi.addToken(hftpToken);
|
|
- token = fs.selectDelegationToken(ugi);
|
|
|
|
|
|
+ token = fs.selectDelegationToken();
|
|
assertNotNull(token);
|
|
assertNotNull(token);
|
|
assertEquals(hftpToken, token);
|
|
assertEquals(hftpToken, token);
|
|
|
|
|
|
// switch to using host-based tokens, no token should match
|
|
// switch to using host-based tokens, no token should match
|
|
SecurityUtilTestHelper.setTokenServiceUseIp(false);
|
|
SecurityUtilTestHelper.setTokenServiceUseIp(false);
|
|
- token = fs.selectDelegationToken(ugi);
|
|
|
|
|
|
+ token = fs.selectDelegationToken();
|
|
assertNull(token);
|
|
assertNull(token);
|
|
|
|
|
|
// test fallback to hdfs token
|
|
// test fallback to hdfs token
|
|
@@ -134,31 +109,17 @@ public class TestHftpDelegationToken {
|
|
DelegationTokenIdentifier.HDFS_DELEGATION_KIND,
|
|
DelegationTokenIdentifier.HDFS_DELEGATION_KIND,
|
|
new Text("localhost:8020"));
|
|
new Text("localhost:8020"));
|
|
ugi.addToken(hdfsToken);
|
|
ugi.addToken(hdfsToken);
|
|
- token = fs.selectDelegationToken(ugi);
|
|
|
|
|
|
+ token = fs.selectDelegationToken();
|
|
assertNotNull(token);
|
|
assertNotNull(token);
|
|
assertEquals(hdfsToken, token);
|
|
assertEquals(hdfsToken, token);
|
|
|
|
|
|
// test hftp is favored over hdfs
|
|
// test hftp is favored over hdfs
|
|
hftpToken = new Token<TokenIdentifier>(
|
|
hftpToken = new Token<TokenIdentifier>(
|
|
new byte[0], new byte[0],
|
|
new byte[0], new byte[0],
|
|
- HftpFileSystem.TOKEN_KIND, new Text("localhost:"+port));
|
|
|
|
|
|
+ HftpFileSystem.TOKEN_KIND, new Text("localhost:0"));
|
|
ugi.addToken(hftpToken);
|
|
ugi.addToken(hftpToken);
|
|
- token = fs.selectDelegationToken(ugi);
|
|
|
|
|
|
+ token = fs.selectDelegationToken();
|
|
assertNotNull(token);
|
|
assertNotNull(token);
|
|
assertEquals(hftpToken, token);
|
|
assertEquals(hftpToken, token);
|
|
}
|
|
}
|
|
-
|
|
|
|
- static class MyHftpFileSystem extends HftpFileSystem {
|
|
|
|
- @Override
|
|
|
|
- public URI getCanonicalUri() {
|
|
|
|
- return super.getCanonicalUri();
|
|
|
|
- }
|
|
|
|
- @Override
|
|
|
|
- public int getDefaultPort() {
|
|
|
|
- return super.getDefaultPort();
|
|
|
|
- }
|
|
|
|
- // don't automatically get a token
|
|
|
|
- @Override
|
|
|
|
- protected void initDelegationToken() throws IOException {}
|
|
|
|
- }
|
|
|
|
}
|
|
}
|