Method initSecureClientProvider

src/SecureRpcHelper.java:128–161

Instantiates the proper security provider based on the configuration. The provider can be either "simple", "kerberos" or a canonical class name to load from the class path. Note that this will attempt to authenticate so it will throw an exception if the login failed. @param hbase_client The hbase cl

(final HBaseClient hbase_client)

   * couldn't instantiate the class.
   */
  private void initSecureClientProvider(final HBaseClient hbase_client) {
    final String mechanism = config.hasProperty(SECURITY_AUTHENTICATION_KEY) ?
        config.getString(SECURITY_AUTHENTICATION_KEY).trim() : "simple";

    if ("simple".equalsIgnoreCase(mechanism)) {
      client_auth_provider = new SimpleClientAuthProvider(hbase_client);
      use_wrap = false;
      return;
    }
    
    if ("kerberos".equalsIgnoreCase(mechanism)) {
      client_auth_provider = new KerberosClientAuthProvider(hbase_client);
    } else {
      try {
        final Class<?> clazz = Class.forName(mechanism);
        final Constructor<?> ctor = clazz.getConstructor(HBaseClient.class);
        client_auth_provider = (ClientAuthProvider)ctor.newInstance(hbase_client);
        LOG.info("Successfully instantiated a security provider of type: " + 
            clazz.getCanonicalName());
      } catch (Exception e) {
        throw new IllegalStateException(
            "Failed to load specified SecureClientProvider: " + mechanism, e);
      }
    }

    final String qop = parseQOP();
    use_wrap = qop != null && !"auth".equalsIgnoreCase(qop);

    final Map<String, String> props = new HashMap<String, String>(2);
    props.put(Sasl.QOP, parseQOP());
    props.put(Sasl.SERVER_AUTH, "true");

    sasl_client = client_auth_provider.newSaslClient(host_ip, props);
  }

  /**
   * Helper that checks to see if we should encrypt the packets between HBase