Java Code Examples for org.apache.hadoop.conf.Configuration#getPassword()

private String getPasswordFromCredentialStore(String propertyName) {
  try {
    String providerPath = logSearchSslConfig.getCredentialStoreProviderPath();
    if (StringUtils.isEmpty(providerPath)) {
      return null;
    }
    
    Configuration config = new Configuration();
    config.set(CREDENTIAL_STORE_PROVIDER_PATH, providerPath);
    char[] passwordChars = config.getPassword(propertyName);
    return (ArrayUtils.isNotEmpty(passwordChars)) ? new String(passwordChars) : null;
  } catch (Exception e) {
    logger.warn(String.format("Could not load password %s from credential store, using default password", propertyName), e);
    return null;
  }
}
 

String getPassword(Configuration conf, String alias, String defaultPass) {
  String password = null;
  try {
    char[] passchars = conf.getPassword(alias);
    if (passchars != null) {
      password = new String(passchars);
    }
    else {
      password = defaultPass;
    }
  }
  catch (IOException ioe) {
    LOG.warn("Exception while trying to password for alias " + alias + ": "
        + ioe.getMessage());
  }
  return password;
}
 

String getPassword(Configuration conf, String alias, String defaultPass) {
  String password = null;
  try {
    char[] passchars = conf.getPassword(alias);
    if (passchars != null) {
      password = new String(passchars);
    }
    else {
      password = defaultPass;
    }
  }
  catch (IOException ioe) {
    LOG.warn("Exception while trying to password for alias " + alias + ": "
        + ioe.getMessage());
  }
  return password;
}
 

/**
 * Leverages the Configuration.getPassword method to attempt to get
 * passwords from the CredentialProvider API before falling back to
 * clear text in config - if falling back is allowed.
 * @param conf Configuration instance
 * @param alias name of the credential to retreive
 * @return String credential value or null
 */
static String getPassword(Configuration conf, String alias) {
  String password = null;
  try {
    char[] passchars = conf.getPassword(alias);
    if (passchars != null) {
      password = new String(passchars);
    }
  }
  catch (IOException ioe) {
    password = null;
  }
  return password;
}
 

public String getPassword(Configuration config) {
  checkState(defaultValue == null || defaultValue instanceof String, "Not a string property");
  String lookupKey = getLookupKey(config, key, deprecatedKeys, (c, k) -> c.get(k) != null);
  char[] value;
  try {
    value = config.getPassword(lookupKey);
  } catch (IOException e) {
    throw new RuntimeException(e);
  }
  return logProperty(lookupKey, value == null ? (String) defaultValue : String.valueOf(value));
}
 

/**
 * A wrapper of {@link Configuration#getPassword(String)}. It returns
 * <code>String</code> instead of <code>char[]</code>.
 *
 * @param conf the configuration
 * @param name the property name
 * @return the password string or null
 */
private static String getPasswordString(Configuration conf, String name)
    throws IOException {
  char[] passchars = conf.getPassword(name);
  if (passchars == null) {
    return null;
  }
  return new String(passchars);
}
 

/**
 * A wrapper of {@link Configuration#getPassword(String)}. It returns
 * <code>String</code> instead of <code>char[]</code>.
 *
 * @param conf the configuration
 * @param name the property name
 * @return the password string or null
 */
private static String getPasswordString(Configuration conf, String name)
    throws IOException {
  char[] passchars = conf.getPassword(name);
  if (passchars == null) {
    return null;
  }
  return new String(passchars);
}
 

/**
 * A wrapper of {@link Configuration#getPassword(String)}. It returns
 * <code>String</code> instead of <code>char[]</code>.
 *
 * @param conf the configuration
 * @param name the property name
 * @return the password string or null
 */
private static String getPasswordString(Configuration conf, String name)
    throws IOException {
  char[] passchars = conf.getPassword(name);
  if (passchars == null) {
    return null;
  }
  return new String(passchars);
}
 

String getPassword(Configuration conf, String alias, String defaultPass) {
  String password = defaultPass;
  try {
    char[] passchars = conf.getPassword(alias);
    if (passchars != null) {
      password = new String(passchars);
    }
  }
  catch (IOException ioe) {
    LOG.warn("Exception while trying to get password for alias " + alias +
        ": " + ioe.getMessage());
  }
  return password;
}
 

/**
 * Leverages the Configuration.getPassword method to attempt to get
 * passwords from the CredentialProvider API before falling back to
 * clear text in config - if falling back is allowed.
 * @param conf Configuration instance
 * @param alias name of the credential to retreive
 * @return String credential value or null
 */
static String getPassword(Configuration conf, String alias) {
  String password = null;
  try {
    char[] passchars = conf.getPassword(alias);
    if (passchars != null) {
      password = new String(passchars);
    }
  }
  catch (IOException ioe) {
    password = null;
  }
  return password;
}
 

/**
 * Retrieve secret and access keys from configured (with
 * {@link org.apache.hadoop.security.alias.CredentialProviderFactory#CREDENTIAL_PROVIDER_PATH} property)
 * credential providers and set it into {@code conf}. If provider path is not configured or credential
 * is absent in providers, it will conditionally fallback to configuration setting. The fallback will occur unless
 * {@link org.apache.hadoop.security.alias.CredentialProvider#CLEAR_TEXT_FALLBACK} is set to {@code false}.
 *
 * @param conf {@code Configuration} which will be updated with credentials from provider
 * @throws IOException thrown if a credential cannot be retrieved from provider
 */
private void handleS3Credentials(Configuration conf) throws IOException {
  String[] credentialKeys = {"fs.s3a.secret.key", "fs.s3a.access.key"};
  for (String key : credentialKeys) {
    char[] credentialChars = conf.getPassword(key);
    if (credentialChars == null) {
      logger.warn(String.format("Property '%s' is absent.", key));
    } else {
      conf.set(key, String.valueOf(credentialChars));
    }
  }
}
 

static String lookupPassword(Configuration conf, String key) throws IOException {
  try {
    final char[] pass = conf.getPassword(key);
    return pass != null ? (new String(pass)).trim() : null;
  } catch (IOException ioe) {
    throw new IOException("Cannot find password option " + key, ioe);
  }
}
 

String getPassword(Configuration conf, String alias, String defaultPass) {
  String password = defaultPass;
  try {
    char[] passchars = conf.getPassword(alias);
    if (passchars != null) {
      password = new String(passchars);
    }
  }
  catch (IOException ioe) {
    LOG.warn("Exception while trying to get password for alias " + alias +
        ": " + ioe.getMessage());
  }
  return password;
}
 

/**
 * Leverages the Configuration.getPassword method to attempt to get
 * passwords from the CredentialProvider API before falling back to
 * clear text in config - if falling back is allowed.
 * @param conf Configuration instance
 * @param alias name of the credential to retreive
 * @return String credential value or null
 */
static String getPassword(Configuration conf, String alias) {
  String password = null;
  try {
    char[] passchars = conf.getPassword(alias);
    if (passchars != null) {
      password = new String(passchars);
    }
  }
  catch (IOException ioe) {
    password = null;
  }
  return password;
}
 

/**
 * Leverages the Configuration.getPassword method to attempt to get
 * passwords from the CredentialProvider API before falling back to
 * clear text in config - if falling back is allowed.
 * @param conf Configuration instance
 * @param alias name of the credential to retreive
 * @return String credential value or null
 */
static String getPassword(Configuration conf, String alias) {
  String password = null;
  try {
    char[] passchars = conf.getPassword(alias);
    if (passchars != null) {
      password = new String(passchars);
    }
  }
  catch (IOException ioe) {
    password = null;
  }
  return password;
}
 

static String getKey(Configuration conf, String keyType) {
  checkNotNull(conf, "conf cannot be null");
  checkNotNull(keyType, "KeyType cannot be null");

  try {
    char[] key = conf.getPassword(keyType);
    if (key == null) {
      throw new IllegalStateException(format("Unable to get value of '%s'", keyType));
    }
    return new String(key);
  } catch (IOException e) {
    throw new RuntimeException(format("Error getting key for '%s' from credential provider", keyType), e);
  }
}
 

public SentryStore(Configuration conf) throws SentryNoSuchObjectException,
SentryAccessDeniedException, SentryConfigurationException, IOException {
  commitSequenceId = 0;
  this.conf = conf;
  Properties prop = new Properties();
  prop.putAll(ServerConfig.SENTRY_STORE_DEFAULTS);
  String jdbcUrl = conf.get(ServerConfig.SENTRY_STORE_JDBC_URL, "").trim();
  Preconditions.checkArgument(!jdbcUrl.isEmpty(), "Required parameter " +
      ServerConfig.SENTRY_STORE_JDBC_URL + " is missed");
  String user = conf.get(ServerConfig.SENTRY_STORE_JDBC_USER, ServerConfig.
      SENTRY_STORE_JDBC_USER_DEFAULT).trim();
  //Password will be read from Credential provider specified using property
  // CREDENTIAL_PROVIDER_PATH("hadoop.security.credential.provider.path" in sentry-site.xml
  // it falls back to reading directly from sentry-site.xml
  char[] passTmp = conf.getPassword(ServerConfig.SENTRY_STORE_JDBC_PASS);
  String pass = null;
  if(passTmp != null) {
    pass = new String(passTmp);
  } else {
    throw new SentryConfigurationException("Error reading " + ServerConfig.SENTRY_STORE_JDBC_PASS);
  }

  String driverName = conf.get(ServerConfig.SENTRY_STORE_JDBC_DRIVER,
      ServerConfig.SENTRY_STORE_JDBC_DRIVER_DEFAULT);
  prop.setProperty(ServerConfig.JAVAX_JDO_URL, jdbcUrl);
  prop.setProperty(ServerConfig.JAVAX_JDO_USER, user);
  prop.setProperty(ServerConfig.JAVAX_JDO_PASS, pass);
  prop.setProperty(ServerConfig.JAVAX_JDO_DRIVER_NAME, driverName);
  for (Map.Entry<String, String> entry : conf) {
    String key = entry.getKey();
    if (key.startsWith(ServerConfig.SENTRY_JAVAX_JDO_PROPERTY_PREFIX) ||
        key.startsWith(ServerConfig.SENTRY_DATANUCLEUS_PROPERTY_PREFIX)) {
      key = StringUtils.removeStart(key, ServerConfig.SENTRY_DB_PROPERTY_PREFIX);
      prop.setProperty(key, entry.getValue());
    }
  }


  boolean checkSchemaVersion = conf.get(
      ServerConfig.SENTRY_VERIFY_SCHEM_VERSION,
      ServerConfig.SENTRY_VERIFY_SCHEM_VERSION_DEFAULT).equalsIgnoreCase(
          "true");
  if (!checkSchemaVersion) {
    prop.setProperty("datanucleus.autoCreateSchema", "true");
    prop.setProperty("datanucleus.fixedDatastore", "false");
  }

  // Disallow operations outside of transactions
  prop.setProperty("datanucleus.NontransactionalRead", "false");
  prop.setProperty("datanucleus.NontransactionalWrite", "false");

  pmf = JDOHelper.getPersistenceManagerFactory(prop);
  verifySentryStoreSchema(checkSchemaVersion);

  // Kick off the thread that cleans orphaned privileges (unless told not to)
  privCleaner = this.new PrivCleaner();
  if (conf.get(ServerConfig.SENTRY_STORE_ORPHANED_PRIVILEGE_REMOVAL,
          ServerConfig.SENTRY_STORE_ORPHANED_PRIVILEGE_REMOVAL_DEFAULT)
          .equalsIgnoreCase("true")) {
    privCleanerThread = new Thread(privCleaner);
    privCleanerThread.start();
  }
}