com.datastax.driver.auth

Class KerberosAuthenticator

java.lang.Object

com.datastax.driver.auth.KerberosAuthenticator

All Implemented Interfaces:

Authenticator

public class KerberosAuthenticator
extends Object
implements Authenticator

Responsible for authenticating with secured DSE services using Kerberos over GSSAPI & SASL. The actual SASL negotiation is delegated to a PrivilegedSaslClient which performs the priviledged actions on behalf of the logged in user.

Field Summary

Fields

Modifier and Type	Field and Description
static String	JAAS_CONFIG_ENTRY
static String	SASL_PROTOCOL_NAME
static String	SASL_PROTOCOL_NAME_PROPERTY
static String[]	SUPPORTED_MECHANISMS

Constructor Summary

Constructors

Constructor and Description
KerberosAuthenticator(InetSocketAddress host)

Method Summary

Modifier and Type	Method and Description
byte[]	evaluateChallenge(byte[] challenge) Evaluate a challenge received from the Server.
byte[]	initialResponse() Obtain an initial response token for initializing the SASL handshake
void	onAuthenticationSuccess(byte[] token) Called when authentication is successful with the last information optionally sent by the server.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

JAAS_CONFIG_ENTRY

public static final String JAAS_CONFIG_ENTRY

See Also:

Constant Field Values

SUPPORTED_MECHANISMS

public static final String[] SUPPORTED_MECHANISMS

SASL_PROTOCOL_NAME

public static final String SASL_PROTOCOL_NAME

See Also:

Constant Field Values

SASL_PROTOCOL_NAME_PROPERTY

public static final String SASL_PROTOCOL_NAME_PROPERTY

See Also:

Constant Field Values

Constructor Detail

KerberosAuthenticator

public KerberosAuthenticator(InetSocketAddress host)

Method Detail

initialResponse

public byte[] initialResponse()

Description copied from interface: Authenticator

Obtain an initial response token for initializing the SASL handshake

Specified by:

initialResponse in interface Authenticator

Returns:

the initial response to send to the server, may be null

evaluateChallenge

public byte[] evaluateChallenge(byte[] challenge)

Description copied from interface: Authenticator

Evaluate a challenge received from the Server. Generally, this method should return null when authentication is complete from the client perspective

Specified by:

evaluateChallenge in interface Authenticator

Parameters:

challenge - the server's SASL challenge

Returns:

updated SASL token, may be null to indicate the client requires no further action

onAuthenticationSuccess

public void onAuthenticationSuccess(byte[] token)

Description copied from interface: Authenticator

Called when authentication is successful with the last information optionally sent by the server.

Specified by:

onAuthenticationSuccess in interface Authenticator

Parameters:

token - the information sent by the server with the authentication successful message. This will be null if the server sends no particular information on authentication success.