Hbase之Java API远程访问Kerberos认证

HbaseConnKer.java

 package BigData.conn;

 import BigData.utils.resource.ResourcesUtils;
 import org.apache.hadoop.conf.Configuration;
 import org.apache.hadoop.hbase.HBaseConfiguration;
 import org.apache.hadoop.hbase.client.Connection;
 import org.apache.hadoop.hbase.client.ConnectionFactory;
 import org.apache.hadoop.security.UserGroupInformation;

 import java.io.IOException;
 import java.io.InputStream;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 import java.util.Properties;

 public class HbaseConnKer {

     private static Connection connectionKer = null;

     private static volatile HbaseConnKer instanceKer;

     private HbaseConnKer() {
         try {
             Properties pro = ResourcesUtils.getResourceAsProperties("Kerberos/HbaseConfigKer.properties");

         /*   这个配置文件主要是记录 kerberos的相关配置信息，例如KDC是哪个IP？默认的realm是哪个？
              这个文件是从远程服务器上copy下来的*/
             System.setProperty("java.security.krb5.conf", pro.getProperty("java.security.krb5.conf"));

             Configuration conf = HBaseConfiguration.create();

             // -----Kerberos配置-----
             InputStream hbaseSiteInputStream = Files.newInputStream(Paths.get(pro.getProperty("hbase.site")));
             if (hbaseSiteInputStream == null) {
                 System.out.println("The hbase-site.xml is null!");
             }
             conf.addResource(hbaseSiteInputStream);
             conf.set("hadoop.security.authentication", pro.getProperty("hadoop.security.authentication"));

             // 这个可以理解成用户名信息，也就是Principal
             conf.set("kerberos.principal", pro.getProperty("kerberos.principal"));

             UserGroupInformation.setConfiguration(conf);
             UserGroupInformation.loginUserFromKeytab(pro.getProperty("kerberos.principal"),
                     pro.getProperty("kerberos.keytab"));
             // ----------

             //显示连接的服务器
             System.out.println("连接服务器："+conf.get("hbase.zookeeper.quorum"));

             connectionKer = ConnectionFactory.createConnection(conf);
             System.out.println("创建connection成功！");
         } catch (IOException e) {
             e.printStackTrace();
         }

     }

     public static Connection getConnection() {
         return connectionKer;
     }

     public static HbaseConnKer getIstance() {
         // 定义一个共有的静态方法，返回该类型实例
         if (instanceKer == null) {
             // 对象实例化时与否判断（不使用同步代码块，instance不等于null时，直接返回对象，提高运行效率）
             synchronized (HbaseConnKer.class) {
                 // 同步代码块（对象未初始化时，使用同步代码块，保证多线程访问时对象在第一次创建后，不再重复被创建）
                 if (instanceKer == null) {
                     // 未初始化，则初始instance变量
                     instanceKer = new HbaseConnKer();
                 }
             }
         }
         return instanceKer;
     }
 }

HbaseConfigKer.properties

# HBase config
hbase.zookeeper.quorum=20.1.1.93
hbase.zookeeper.property.clientPort=2181

java.security.krb5.conf=src/main/resources/Kerberos/krb5.conf
hadoop.security.authentication=kerberos
hbase.site=src/main/resources/Kerberos/hbase-site.xml
kerberos.keytab=src/main/resources/Kerberos/XXX.keytab
kerberos.principal=[e-mail]