org.apache.tinkerpop.gremlin.server.auth

## Class Krb5Authenticator

- java.lang.Object
- - org.apache.tinkerpop.gremlin.server.auth.Krb5Authenticator

- All Implemented Interfaces:
    Authenticator

      public class Krb5Authenticator
      extends Object
      implements Authenticator

  A Kerberos (GSSAPI) implementation of an `Authenticator` This authenticator authenticates and autorizes all clients with a valid service ticket.
  Author:
    Marc de Lignie

- - ### Nested Class Summary

    - ### Nested classes/interfaces inherited from interface org.apache.tinkerpop.gremlin.server.auth.Authenticator

      `Authenticator.SaslNegotiator`

  - ### Constructor Summary

    Constructors
    Constructor and Description
    `Krb5Authenticator()`

  - ### Method Summary

    All Methods Instance Methods Concrete Methods
    Modifier and Type | Method and Description
    --- | ---
    `AuthenticatedUser` | `authenticate(Map<String,String> credentials)` A "standard" authentication implementation that can be used more generically without SASL support.
    `Authenticator.SaslNegotiator` | `newSaslNegotiator(InetAddress remoteAddress)` Provide a SASL handler to perform authentication for an single connection.
    `boolean` | `requireAuthentication()` Whether or not the authenticator requires explicit login.
    `void` | `setup(Map<String,Object> config)` Called once on server startup with the authentication.config from the *.yaml file

    - ### Methods inherited from class java.lang.Object

      `clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait`

- - ### Constructor Detail

    - #### Krb5Authenticator

          public Krb5Authenticator()

  - ### Method Detail

    - #### requireAuthentication

          public boolean requireAuthentication()

      Description copied from interface: `Authenticator`
      Whether or not the authenticator requires explicit login. If false will instantiate user with AuthenticatedUser.ANONYMOUS_USER.
      Specified by:
        `requireAuthentication` in interface `Authenticator`

    - #### setup

          public void setup(Map<String,Object> config)

      Called once on server startup with the authentication.config from the *.yaml file
      Specified by:
        `setup` in interface `Authenticator`

    - #### newSaslNegotiator

          public Authenticator.SaslNegotiator newSaslNegotiator(InetAddress remoteAddress)

      Description copied from interface: `Authenticator`
      Provide a SASL handler to perform authentication for an single connection. SASL is a stateful protocol, so a new instance must be used for each authentication attempt.
      Specified by:
        `newSaslNegotiator` in interface `Authenticator`
      Parameters:
        `remoteAddress` - the IP address of the client to authenticate to authenticate or null if an internal client (one not connected over the remote transport).

    - #### authenticate

          public AuthenticatedUser authenticate(Map<String,String> credentials)
                                         throws AuthenticationException

      Description copied from interface: `Authenticator`
      A "standard" authentication implementation that can be used more generically without SASL support. This implementation is used when a particular `Channelizer` doesn't support SASL directly (like basic HTTP authentication).
      Specified by:
        `authenticate` in interface `Authenticator`
      Throws:
        `AuthenticationException`

Copyright © 2013–2020 Apache Software Foundation. All rights reserved.