hbase-common/src/main/java/org/apache/hadoop/hbase/security/SecurityConstants.java

   1 /*
   2  * Licensed to the Apache Software Foundation (ASF) under one
   3  * or more contributor license agreements.  See the NOTICE file
   4  * distributed with this work for additional information
   5  * regarding copyright ownership.  The ASF licenses this file
   6  * to you under the Apache License, Version 2.0 (the
   7  * "License"); you may not use this file except in compliance
   8  * with the License.  You may obtain a copy of the License at
   9  *
  10  *     http://www.apache.org/licenses/LICENSE-2.0
  11  *
  12  * Unless required by applicable law or agreed to in writing, software
  13  * distributed under the License is distributed on an "AS IS" BASIS,
  14  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  15  * See the License for the specific language governing permissions and
  16  * limitations under the License.
  17  */
  18 package org.apache.hadoop.hbase.security;
  19
  20 import org.apache.hadoop.hbase.HBaseInterfaceAudience;
  21 import org.apache.yetus.audience.InterfaceAudience;
  22
  23 /**
  24  * SecurityConstants holds a bunch of kerberos-related constants
  25  */
  26 @InterfaceAudience.Private
  27 public final class SecurityConstants {
  28
  29   /**
  30    * Configuration keys for programmatic JAAS configuration for secured master
  31    * and regionserver interaction
  32    */
  33   public static final String MASTER_KRB_PRINCIPAL = "hbase.master.kerberos.principal";
  34   public static final String MASTER_KRB_KEYTAB_FILE = "hbase.master.keytab.file";
  35   public static final String REGIONSERVER_KRB_PRINCIPAL = "hbase.regionserver.kerberos.principal";
  36   public static final String REGIONSERVER_KRB_KEYTAB_FILE = "hbase.regionserver.keytab.file";
  37
  38   /**
  39    * This config is for experts: don't set its value unless you really know what you are doing.
  40    * When set to true, HBase client using SASL Kerberos will skip reverse DNS lookup and use provided
  41    * hostname of the destination for the principal instead. See https://issues.apache.org/jira/browse/HBASE-25665
  42    * for more details.
  43    */
  44   @InterfaceAudience.LimitedPrivate(HBaseInterfaceAudience.CONFIG)
  45   public static final String UNSAFE_HBASE_CLIENT_KERBEROS_HOSTNAME_DISABLE_REVERSEDNS =
  46     "hbase.unsafe.client.kerberos.hostname.disable.reversedns";
  47   public static final boolean DEFAULT_UNSAFE_HBASE_CLIENT_KERBEROS_HOSTNAME_DISABLE_REVERSEDNS = false;
  48
  49   private SecurityConstants() {
  50     // Can't be instantiated with this ctor.
  51   }
  52 }