在 Java 代碼中對 Kerberos 主體進行身份驗證

　　轉載請注明出處：http://www.cnblogs.com/xiaodf/

　　本文舉例說明如何使用 org.apache.hadoop.security.UserGroupInformation 類在 Java 應用程序中對 Kerberos 主體進行身份驗證。

　　以下代碼段驗證 user3主體（使用 user3.keytab文件）：

org.apache.hadoop.conf.Configuration conf = new org.apache.hadoop.conf.Configuration();
conf.set("hadoop.security.authentication", "Kerberos");
UserGroupInformation.setConfiguration(conf);
UserGroupInformation.loginUserFromKeytab(principal,keytab);
System.out.println("getting connection");
System.out.println("current user: "+UserGroupInformation.getCurrentUser());
System.out.println("login user: "+UserGroupInformation.getLoginUser());

　　示例代碼實現的功能是：驗證用戶user3的keytab后，通過jdbc查詢某張表的數據打印到控制台。

　　運行腳本hive.sh如下：

spark-submit --class iie.hadoop.permission.hive2 --master local /home/xdf/hive.jar user3 user3.keytab "select * from test1.table1"

　　程序完整代碼如下：

import java.sql.*;
import org.apache.hadoop.security.UserGroupInformation;

public class hive2 {
    public static void main(String args[]) {
        String principal = args[0];
        String keytab = args[1];
        String sql = args[2];
        try {
            org.apache.hadoop.conf.Configuration conf = new org.apache.hadoop.conf.Configuration();
            conf.set("hadoop.security.authentication", "Kerberos");
            UserGroupInformation.setConfiguration(conf);
            UserGroupInformation.loginUserFromKeytab(principal,keytab);
            System.out.println("getting connection");
            System.out.println("current user: "+UserGroupInformation.getCurrentUser());
            System.out.println("login user: "+UserGroupInformation.getLoginUser());
            
            Class.forName("org.apache.hive.jdbc.HiveDriver");
            Connection con = DriverManager
                    .getConnection("jdbc:hive2://t163:10000/;principal=hive/[e-mail]");
            System.out.println("got connection");
            Statement stmt = con.createStatement();
            ResultSet rs = stmt.executeQuery(sql);// executeQuery會返回結果的集合，否則返回空值
            System.out.println("打印輸出結果：");
            while (rs.next()) {
                System.out.println(rs.getString(1));// 入如果返回的是int類型可以用getInt()
            }
            
            con.close();
        } catch (Exception e) {
            e.printStackTrace();
        }
    }
}

 

運行結果如下：

[root@t161 xdf]# sh hive2.sh 
16/10/27 15:12:15 INFO security.UserGroupInformation: Login successful for user user3 using keytab file user3.keytab
getting connection
current user: [e-mail] (auth:KERBEROS)
login user: [e-mail] (auth:KERBEROS)
16/10/27 15:12:15 INFO jdbc.Utils: Supplied authorities: t163:10000
16/10/27 15:12:15 INFO jdbc.Utils: Resolved authority: t163:10000
got connection
打印輸出結果：
1