org.apache.accumulo.core.client.security.tokens

Interface DelegationToken

All Superinterfaces:

AuthenticationToken, Cloneable, Destroyable, org.apache.hadoop.io.Writable

public interface DelegationToken
extends AuthenticationToken

An AuthenticationToken that wraps a "Hadoop style" delegation token created by Accumulo. The intended scope of this token is when a KerberosToken cannot be used instead. The most common reason for this is within YARN jobs. The Kerberos credentials of the user are not passed over the wire to the job itself. The delegation token serves as a mechanism to obtain a transient shared secret with Accumulo using a KerberosToken and then run some task authenticating with that shared secret.

Obtain a delegation token by calling SecurityOperations.getDelegationToken(org.apache.accumulo.core.client.admin.DelegationTokenConfig)

Since:

1.7.0

Nested Class Summary

Nested classes/interfaces inherited from interface org.apache.accumulo.core.client.security.tokens.AuthenticationToken

AuthenticationToken.AuthenticationTokenSerializer, AuthenticationToken.Properties, AuthenticationToken.TokenProperty

Method Summary

Methods inherited from interface org.apache.accumulo.core.client.security.tokens.AuthenticationToken

clone, getProperties, init

Methods inherited from interface org.apache.hadoop.io.Writable

readFields, write

Methods inherited from interface javax.security.auth.Destroyable

destroy, isDestroyed