QueryIO Server provides access to authorized user only. To log in to the QueryIO server, you need to provide valid username and password along with the GET request to the server. If the username and password combination that you provide is correct, then you'll be authorized to access QueryIO cluster and perform different operations on it.
You can authenticate using following interfaces:
The HTTP REST API supports the complete FileSystem interface for HDFS. Following sample is explained using curl command.
When security is off, the authenticated user is the username specified in the 'user.name' query parameter. If the 'user.name' parameter is not set, the server may either set the authenticated user to a default web user.
curl -i "http://<HOST>:<PORT>/webhdfs/v1/<PATH>?[user.name=<USER>&]op=..."
When security is on, authentication is performed by Kerberos SPNEGO.
curl -i --negotiate -u : "http://<HOST>:<PORT>/webhdfs/v1/<PATH>?op=..."
Example: When security is off: curl -i "http://192.168.0.1:5678/webhdfs/v1/queryio?user.name=admin&op=MKDIRS" When Kerberos is enabled: curl -i --negotiate -u : "http://192.168.0.1:5678/webhdfs/v1/queryio?user.name=admin&op=..."
Following code can be used to login to QueryIO server using S3 compatible api.
HttpURLConnection is used to connect to QueryIO server through GET request providing username and password along the HttpURLConnection object.
import java.net.HttpURLConnection;
import java.net.URL;
import org.apache.http.HttpStatus;
public class LoginOperation {
/**
* This program will login into QueryIO Server
* @param serverURL: URL of S3 Compatible REST server(http://<S3 server IP> : <S3 server port> /queryio/). For example: http://192.168.0.1:5667/queryio/
* @param username: username to login
* @param password: password of username provided
*/
public static String login(String serverURL, String username,
String password) throws Exception {
URL url = null;
HttpURLConnection httpCon = null;
String token = null;
try {
/* appending "/" at the end of serverURL */
if (!serverURL.endsWith("/")) {
serverURL = serverURL + "/";
}
url = new URL(serverURL); //create a new URL object
//Returns a URLConnection object that represents a connection to the remote object referred to by the URL.
httpCon = (HttpURLConnection) url.openConnection();
httpCon.setDoOutput(true); // to use the URL connection for output
httpCon.setRequestMethod("GET"); //GET request to be used
httpCon.addRequestProperty("username", username); //set username property of HttpURLConnection
httpCon.addRequestProperty("password", password); //set password property of HttpURLConnection
httpCon.connect(); //Opens a communications link to the resource reference by the URL
if (httpCon.getResponseCode() == HttpStatus.SC_OK) {
token = httpCon.getHeaderField("authorization"); //get authorization token
// Use this token in subsequent requests for the current session
}
} finally { //close connection
if (httpCon != null) {
httpCon.disconnect();
}
}
return token;
}
}
Java HDFS automatically uses underlying operating system's account username and password for autheticating to QueryIO server, if kerberos is not set. So in order to login to the server, change operating system's account username and password to QueryIO user credentials.
If kerberos security is enabled, 'kadmin.local' must be used.