org.apache.hadoop.hbase.test

Class IntegrationTestZKAndFSPermissions

java.lang.Object

org.apache.hadoop.hbase.util.AbstractHBaseTool

org.apache.hadoop.hbase.test.IntegrationTestZKAndFSPermissions

All Implemented Interfaces:

org.apache.hadoop.conf.Configurable, org.apache.hadoop.util.Tool

public class IntegrationTestZKAndFSPermissions
extends AbstractHBaseTool

An integration test which checks that the znodes in zookeeper and data in the FileSystem are protected for secure HBase deployments. This test is intended to be run on clusters with kerberos authorization for HBase and ZooKeeper. If hbase.security.authentication is not set to kerberos, the test does not run unless -f is specified which bypasses the check. It is recommended to always run with -f on secure clusters so that the test checks the actual end result, not the configuration. The test should be run as hbase user with kinit / TGT cached since it accesses HDFS.

Example usage: hbase org.apache.hadoop.hbase.test.IntegrationTestZnodeACLs -h

Field Summary

Fields

Modifier and Type	Field and Description
static String	FORCE_CHECK_ARG
static String	FS_PERMS
static String	PRINCIPAL_ARG
static String	SKIP_CHECK_FS
static String	SKIP_CHECK_ZK
static String	SUPERUSER_ARG

Fields inherited from class org.apache.hadoop.hbase.util.AbstractHBaseTool

cmdLineArgs, conf, EXIT_FAILURE, EXIT_SUCCESS, LONG_HELP_OPTION, options, SHORT_HELP_OPTION

Constructor Summary

Constructors

Constructor and Description
IntegrationTestZKAndFSPermissions()

Method Summary

Modifier and Type	Method and Description
protected void	addOptions()
protected int	doWork()
static void	main(String[] args)
protected void	processOptions(org.apache.hbase.thirdparty.org.apache.commons.cli.CommandLine cmd)
void	setConf(org.apache.hadoop.conf.Configuration conf)

Methods inherited from class org.apache.hadoop.hbase.util.AbstractHBaseTool

addOption, addOptNoArg, addOptNoArg, addOptWithArg, addOptWithArg, addRequiredOption, addRequiredOptWithArg, addRequiredOptWithArg, doStaticMain, getConf, getOptionAsDouble, getOptionAsInt, getOptionAsLong, newParser, parseArgs, parseInt, parseLong, printUsage, printUsage, processOldArgs, run

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

FORCE_CHECK_ARG

public static final String FORCE_CHECK_ARG

See Also:

Constant Field Values

PRINCIPAL_ARG

public static final String PRINCIPAL_ARG

See Also:

Constant Field Values

SUPERUSER_ARG

public static final String SUPERUSER_ARG

See Also:

Constant Field Values

FS_PERMS

public static final String FS_PERMS

See Also:

Constant Field Values

SKIP_CHECK_FS

public static final String SKIP_CHECK_FS

See Also:

Constant Field Values

SKIP_CHECK_ZK

public static final String SKIP_CHECK_ZK

See Also:

Constant Field Values

Constructor Detail

IntegrationTestZKAndFSPermissions

public IntegrationTestZKAndFSPermissions()

Method Detail

setConf

public void setConf(org.apache.hadoop.conf.Configuration conf)

Specified by:

setConf in interface org.apache.hadoop.conf.Configurable

Overrides:

setConf in class AbstractHBaseTool

addOptions

protected void addOptions()

Specified by:

addOptions in class AbstractHBaseTool

processOptions

protected void processOptions(org.apache.hbase.thirdparty.org.apache.commons.cli.CommandLine cmd)

Specified by:

processOptions in class AbstractHBaseTool

doWork

protected int doWork()
              throws Exception

Specified by:

doWork in class AbstractHBaseTool

Throws:

Exception

main

public static void main(String[] args)
                 throws Exception

Throws:

Exception