public class oadd.org.apache.hadoop.security.KDiag extends oadd.org.apache.hadoop.conf.Configured implements oadd.org.apache.hadoop.util.Tool, java.io.Closeable { private static final org.slf4j.Logger LOG; public static final java.lang.String KRB5_CCNAME; public static final java.lang.String KRB5_CONFIG; public static final java.lang.String JAVA_SECURITY_KRB5_CONF; public static final java.lang.String JAVA_SECURITY_KRB5_REALM; public static final java.lang.String JAVA_SECURITY_KRB5_KDC_ADDRESS; public static final java.lang.String SUN_SECURITY_KRB5_DEBUG; public static final java.lang.String SUN_SECURITY_SPNEGO_DEBUG; public static final java.lang.String SUN_SECURITY_JAAS_FILE; public static final java.lang.String KERBEROS_KINIT_COMMAND; public static final java.lang.String HADOOP_AUTHENTICATION_IS_DISABLED; public static final java.lang.String UNSET; public static final java.lang.String NO_DEFAULT_REALM; public static final int KDIAG_FAILURE; public static final java.lang.String DFS_DATA_TRANSFER_SASLPROPERTIES_RESOLVER_CLASS; public static final java.lang.String DFS_DATA_TRANSFER_PROTECTION; public static final java.lang.String ETC_KRB5_CONF; public static final java.lang.String ETC_NTP; public static final java.lang.String HADOOP_JAAS_DEBUG; private java.io.PrintWriter out; private java.io.File keytab; private java.lang.String principal; private long minKeyLength; private boolean securityRequired; private boolean nofail; private boolean nologin; private boolean jaas; private boolean checkShortName; private static final java.util.regex.Pattern nonSimplePattern; private boolean probeHasFailed; public static final java.lang.String CAT_CONFIG; public static final java.lang.String CAT_JAAS; public static final java.lang.String CAT_JVM; public static final java.lang.String CAT_KERBEROS; public static final java.lang.String CAT_LOGIN; public static final java.lang.String CAT_OS; public static final java.lang.String CAT_SASL; public static final java.lang.String CAT_UGI; public static final java.lang.String CAT_TOKEN; public static final java.lang.String ARG_KEYLEN; public static final java.lang.String ARG_KEYTAB; public static final java.lang.String ARG_JAAS; public static final java.lang.String ARG_NOFAIL; public static final java.lang.String ARG_NOLOGIN; public static final java.lang.String ARG_OUTPUT; public static final java.lang.String ARG_PRINCIPAL; public static final java.lang.String ARG_RESOURCE; public static final java.lang.String ARG_SECURE; public static final java.lang.String ARG_VERIFYSHORTNAME; public void (oadd.org.apache.hadoop.conf.Configuration, java.io.PrintWriter, java.io.File, java.lang.String, long, boolean) { java.io.PrintWriter v; long v; oadd.org.apache.hadoop.conf.Configuration v; java.lang.String v; oadd.org.apache.hadoop.security.KDiag v; java.io.File v; boolean v; v := @this: oadd.org.apache.hadoop.security.KDiag; v := @parameter: oadd.org.apache.hadoop.conf.Configuration; v := @parameter: java.io.PrintWriter; v := @parameter: java.io.File; v := @parameter: java.lang.String; v := @parameter: long; v := @parameter: boolean; specialinvoke v.(oadd.org.apache.hadoop.conf.Configuration)>(v); v. = 256L; v. = 0; v. = 0; v. = 0; v. = 0; v. = 0; v. = v; v. = v; v. = v; v. = v; v. = v; return; } public void () { oadd.org.apache.hadoop.security.KDiag v; v := @this: oadd.org.apache.hadoop.security.KDiag; specialinvoke v.()>(); v. = 256L; v. = 0; v. = 0; v. = 0; v. = 0; v. = 0; return; } public void close() throws java.io.IOException { java.io.PrintWriter v, v; oadd.org.apache.hadoop.security.KDiag v; v := @this: oadd.org.apache.hadoop.security.KDiag; specialinvoke v.(); v = v.; if v == null goto label; v = v.; virtualinvoke v.(); label: return; } public int run(java.lang.String[]) throws java.lang.Exception { byte v; boolean v, v, v, v, v, v, v, v, v, v; java.io.PrintWriter v; oadd.org.apache.hadoop.security.KDiag v; java.util.List v; java.lang.ClassLoader v; java.lang.Throwable v; java.lang.Object[] v, v, v, v, v; java.lang.String[] v; int v, v; java.lang.String v, v, v, v, v, v; java.util.LinkedList v; org.slf4j.Logger v; java.util.Iterator v; java.io.File v, v; java.lang.Class v; java.lang.Object v; java.io.InputStream v; v := @this: oadd.org.apache.hadoop.security.KDiag; v := @parameter: java.lang.String[]; v = new java.util.LinkedList; v = staticinvoke (v); specialinvoke v.(java.util.Collection)>(v); v = staticinvoke ("--keytab", v); if v == null goto label; v = new java.io.File; specialinvoke v.(java.lang.String)>(v); v. = v; label: v = staticinvoke ("--principal", v); v. = v; v = staticinvoke ("--out", v); v = staticinvoke ("--keylen", v); if v == null goto label; v = staticinvoke (v); v. = v; label: v = staticinvoke ("--secure", v); v. = v; v = staticinvoke ("--nofail", v); v. = v; v = staticinvoke ("--jaas", v); v. = v; v = staticinvoke ("--nologin", v); v. = v; v = staticinvoke ("--verifyshortname", v); v. = v; label: v = staticinvoke ("--resource", v); if null == v goto label; v = ; interfaceinvoke v.("Loading resource {}", v); v = virtualinvoke v.(); v = virtualinvoke v.(); v = virtualinvoke v.(v); label: if v == null goto label; v = 1; goto label; label: v = 0; label: v = newarray (java.lang.Object)[1]; v[0] = v; v = specialinvoke v.(v, "CONFIG", "No resource %s", v); if v == 0 goto label; staticinvoke (v); label: if v == null goto label; virtualinvoke v.(); goto label; label: v := @caughtexception; throw v; label: v = interfaceinvoke v.(); if v != 0 goto label; v = newarray (java.lang.Object)[0]; specialinvoke v.("Unknown arguments in command:", v); v = interfaceinvoke v.(); label: v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); v = newarray (java.lang.Object)[1]; v[0] = v; specialinvoke v.(" \"%s\"", v); goto label; label: specialinvoke v.(); v = specialinvoke v.(); v = newarray (java.lang.Object)[0]; specialinvoke v.(v, v); v = (int) -1; return v; label: if v == null goto label; v = newarray (java.lang.Object)[1]; v[0] = v; specialinvoke v.("Printing output to %s", v); v = new java.io.PrintWriter; v = new java.io.File; specialinvoke v.(java.lang.String)>(v); specialinvoke v.(java.io.File,java.lang.String)>(v, "UTF-8"); v. = v; label: virtualinvoke v.(); v = v.; if v == 0 goto label; v = 41; goto label; label: v = 0; label: return v; catch java.lang.Throwable from label to label with label; } private java.lang.String usage() { long v; oadd.org.apache.hadoop.security.KDiag v; java.lang.String v, v, v, v, v, v, v, v, v, v, v, v; v := @this: oadd.org.apache.hadoop.security.KDiag; v = specialinvoke v.("-D", "key=value", "Define a configuration option"); v = specialinvoke v.("--jaas", "", "Require a JAAS file to be defined in java.security.auth.login.config"); v = v.; v = dynamicinvoke "makeConcatWithConstants" (v) ("Require a minimum size for encryption keys supported by the JVM. Default value : \u0001"); v = specialinvoke v.("--keylen", "", v); v = specialinvoke v.("--keytab", " --principal ", "Login from a keytab as a specific principal"); v = specialinvoke v.("--nofail", "", "Do not fail on the first problem"); v = specialinvoke v.("--nologin", "", "Do not attempt to log in"); v = specialinvoke v.("--out", "", "Write output to a file"); v = specialinvoke v.("--resource", "", "Load an XML configuration resource"); v = specialinvoke v.("--secure", "", "Require the hadoop configuration to be secure"); v = specialinvoke v.("--verifyshortname", "--principal ", "Verify the short name of the specific principal does not contain \'@\' or \'/\'"); v = dynamicinvoke "makeConcatWithConstants" (v, v, v, v, v, v, v, v, v, v) ("KDiag: Diagnose Kerberos Problems\n\u0001\u0001\u0001\u0001\u0001\u0001\u0001\u0001\u0001\u0001"); return v; } private java.lang.String arg(java.lang.String, java.lang.String, java.lang.String) { java.lang.Object[] v; oadd.org.apache.hadoop.security.KDiag v; java.lang.String v, v, v, v, v, v; boolean v; v := @this: oadd.org.apache.hadoop.security.KDiag; v := @parameter: java.lang.String; v := @parameter: java.lang.String; v := @parameter: java.lang.String; v = newarray (java.lang.Object)[4]; v[0] = v; v = virtualinvoke v.(); if v != 0 goto label; v = " "; goto label; label: v = ""; label: v[1] = v; v[2] = v; v[3] = v; v = staticinvoke (" [%s%s%s] : %s", v); v = dynamicinvoke "makeConcatWithConstants" (v) ("\u.\n"); return v; } public boolean execute() throws java.lang.Exception { java.net.InetAddress v; java.lang.Long v; oadd.org.apache.hadoop.conf.Configuration v, v; java.util.Set v; oadd.org.apache.hadoop.security.KDiag v; java.lang.Throwable v; java.lang.Object[] v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v; long v, v; java.util.ArrayList v; java.lang.String v, v, v, v, v, v, v, v, v, v, v; java.util.Properties v; oadd.org.apache.hadoop.security.UserGroupInformation v; java.io.File v, v, v; java.util.Date v; boolean v, v, v, v, v, v, v, v, v, v, v, v, v; java.lang.String[] v, v, v; int v, v, v, v, v, v; java.lang.Boolean v, v, v; org.slf4j.Logger v, v; java.util.Iterator v; java.lang.Object v; java.util.Comparator v; v := @this: oadd.org.apache.hadoop.security.KDiag; v = newarray (java.lang.Object)[1]; v = new java.util.Date; v = staticinvoke (); specialinvoke v.(long)>(v); v[0] = v; specialinvoke v.("Kerberos Diagnostics scan at %s", v); v = newarray (java.lang.Object)[1]; v = staticinvoke (); v = virtualinvoke v.(); v[0] = v; specialinvoke v.("Hostname = %s", v); v = newarray (java.lang.Object)[2]; v[0] = "--keylen"; v = v.; v = staticinvoke (v); v[1] = v; specialinvoke v.("%s = %d", v); v = newarray (java.lang.Object)[2]; v[0] = "--keytab"; v = v.; v[1] = v; specialinvoke v.("%s = %s", v); v = newarray (java.lang.Object)[2]; v[0] = "--principal"; v = v.; v[1] = v; specialinvoke v.("%s = %s", v); v = newarray (java.lang.Object)[2]; v[0] = "--verifyshortname"; v = v.; v = staticinvoke (v); v[1] = v; specialinvoke v.("%s = %s", v); virtualinvoke v.(); v = newarray (java.lang.Object)[1]; v = staticinvoke (); v[0] = v; specialinvoke v.("JVM Kerberos Login Module = %s", v); v = newarray (java.lang.Object)[0]; specialinvoke v.("Core System Properties", v); v = newarray (java.lang.String)[9]; v[0] = "user.name"; v[1] = "java.version"; v[2] = "java.vendor"; v[3] = "java.security.krb.conf"; v[4] = "java.security.krb.realm"; v[5] = "java.security.krb.kdc"; v[6] = "sun.security.krb.debug"; v[7] = "sun.security.spnego.debug"; v[8] = "java.security.auth.login.config"; v = lengthof v; v = 0; label: if v >= v goto label; v = v[v]; specialinvoke v.(v); v = v + 1; goto label; label: specialinvoke v.(); v = newarray (java.lang.Object)[0]; specialinvoke v.("All System Properties", v); v = new java.util.ArrayList; v = staticinvoke (); v = virtualinvoke v.(); specialinvoke v.(java.util.Collection)>(v); v = ; staticinvoke (v, v); v = virtualinvoke v.(); label: v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); specialinvoke v.(v); goto label; label: specialinvoke v.(); v = newarray (java.lang.Object)[0]; specialinvoke v.("Environment Variables", v); v = newarray (java.lang.String)[9]; v[0] = "HADOOP_JAAS_DEBUG"; v[1] = "KRB5CCNAME"; v[2] = "KRB5_CONFIG"; v[3] = "HADOOP_USER_NAME"; v[4] = "HADOOP_PROXY_USER"; v[5] = "HADOOP_TOKEN_FILE_LOCATION"; v[6] = "HADOOP_SECURE_LOG"; v[7] = "HADOOP_OPTS"; v[8] = "HADOOP_CLIENT_OPTS"; v = lengthof v; v = 0; label: if v >= v goto label; v = v[v]; specialinvoke v.(v); v = v + 1; goto label; label: specialinvoke v.(); v = newarray (java.lang.Object)[0]; specialinvoke v.("Configuration Options", v); v = newarray (java.lang.String)[13]; v[0] = "hadoop.kerberos.kinit.command"; v[1] = "hadoop.security.authentication"; v[2] = "hadoop.security.authorization"; v[3] = "hadoop.kerberos.min.seconds.before.relogin"; v[4] = "hadoop.security.dns.interface"; v[5] = "hadoop.security.dns.nameserver"; v[6] = "hadoop.rpc.protection"; v[7] = "hadoop.security.saslproperties.resolver.class"; v[8] = "hadoop.security.crypto.codec.classes"; v[9] = "hadoop.security.group.mapping"; v[10] = "hadoop.security.impersonation.provider.class"; v[11] = "dfs.data.transfer.protection"; v[12] = "dfs.data.transfer.saslproperties.resolver.class"; v = lengthof v; v = 0; label: if v >= v goto label; v = v[v]; specialinvoke v.(v); v = v + 1; goto label; label: v = virtualinvoke v.(); v = virtualinvoke v.(v); if v == 0 goto label; v = newarray (java.lang.Object)[0]; specialinvoke v.("Hadoop authentication is disabled", v); v = v.; v = newarray (java.lang.Object)[0]; specialinvoke v.(v, "CONFIG", "Hadoop authentication is disabled", v); v = ; interfaceinvoke v.("Security is not enabled for the Hadoop cluster"); goto label; label: v = new oadd.org.apache.hadoop.conf.Configuration; specialinvoke v.()>(); v = virtualinvoke v.(v); if v == 0 goto label; v = ; interfaceinvoke v.("The default cluster security is insecure"); v = v.; v = newarray (java.lang.Object)[0]; specialinvoke v.(v, "CONFIG", "Hadoop authentication is disabled", v); label: v = specialinvoke v.("sun.security.krb.debug"); v = specialinvoke v.("sun.security.spnego.debug"); label: staticinvoke (v); specialinvoke v.(v); specialinvoke v.(); virtualinvoke v.(); specialinvoke v.("hadoop.security.saslproperties.resolver.class"); v = virtualinvoke v.("dfs.data.transfer.saslproperties.resolver.class"); if v == null goto label; specialinvoke v.("dfs.data.transfer.saslproperties.resolver.class"); label: specialinvoke v.(); v = v.; specialinvoke v.(v); specialinvoke v.(); v = v.; if v == 0 goto label; virtualinvoke v.(); label: v = v.; if v != 0 goto label; v = newarray (java.lang.Object)[0]; specialinvoke v.("Logging in", v); v = v.; if v == null goto label; v = v.; specialinvoke v.(v); specialinvoke v.(); goto label; label: v = staticinvoke (); specialinvoke v.("Log in user", v); specialinvoke v.("Login user", v); v = newarray (java.lang.Object)[1]; v = staticinvoke (); v = staticinvoke (v); v[0] = v; specialinvoke v.("Ticket based login: %b", v); v = newarray (java.lang.Object)[1]; v = staticinvoke (); v = staticinvoke (v); v[0] = v; specialinvoke v.("Keytab based login: %b", v); label: v = staticinvoke (v); staticinvoke ("sun.security.krb.debug", v); v = staticinvoke (v); staticinvoke ("sun.security.spnego.debug", v); return 1; label: v := @caughtexception; v = staticinvoke (v); staticinvoke ("sun.security.krb.debug", v); v = staticinvoke (v); staticinvoke ("sun.security.spnego.debug", v); throw v; catch java.lang.Throwable from label to label with label; } protected boolean isSimpleAuthentication(oadd.org.apache.hadoop.conf.Configuration) { oadd.org.apache.hadoop.conf.Configuration v; oadd.org.apache.hadoop.security.UserGroupInformation$AuthenticationMethod v, v; oadd.org.apache.hadoop.security.KDiag v; boolean v; v := @this: oadd.org.apache.hadoop.security.KDiag; v := @parameter: oadd.org.apache.hadoop.conf.Configuration; v = staticinvoke (v); v = ; v = virtualinvoke v.(v); return v; } protected void validateKeyLength() throws java.security.NoSuchAlgorithmException { java.lang.Object[] v, v; long v, v; oadd.org.apache.hadoop.security.KDiag v; java.lang.Integer v, v; byte v; java.lang.Long v; int v; boolean v; v := @this: oadd.org.apache.hadoop.security.KDiag; v = staticinvoke ("AES"); v = newarray (java.lang.Object)[1]; v = staticinvoke (v); v[0] = v; specialinvoke v.("Maximum AES encryption key length %d bits", v); v = v.; v = v cmp v; if v > 0 goto label; v = 1; goto label; label: v = 0; label: v = newarray (java.lang.Object)[2]; v = staticinvoke (v); v[0] = v; v = v.; v = staticinvoke (v); v[1] = v; specialinvoke v.(v, "JVM", "Java Cryptography Extensions are not installed on this JVM. Maximum supported key length %s - minimum required %d", v); return; } protected void validateShortName() { java.lang.Object[] v, v, v, v; java.util.regex.Matcher v; java.lang.String v, v, v, v, v, v, v, v, v, v; oadd.org.apache.hadoop.security.KDiag$KerberosDiagsFailure v; boolean v, v; java.io.IOException v; oadd.org.apache.hadoop.security.KDiag v; java.lang.IllegalArgumentException v; java.util.regex.Pattern v; oadd.org.apache.hadoop.security.authentication.util.KerberosName v; v := @this: oadd.org.apache.hadoop.security.KDiag; v = v.; if v != null goto label; v = 1; goto label; label: v = 0; label: v = newarray (java.lang.Object)[0]; specialinvoke v.(v, "KERBEROS", "No principal defined", v); label: v = new oadd.org.apache.hadoop.security.authentication.util.KerberosName; v = v.; specialinvoke v.(java.lang.String)>(v); v = virtualinvoke v.(); v = ; v = virtualinvoke v.(v); v = virtualinvoke v.(); if v == 0 goto label; v = v.; v = dynamicinvoke "makeConcatWithConstants" (v, v) ("\u short name: \u still contains @ or /"); v = newarray (java.lang.Object)[0]; specialinvoke v.("KERBEROS", v, v); label: goto label; label: v := @caughtexception; v = new oadd.org.apache.hadoop.security.KDiag$KerberosDiagsFailure; v = v.; v = dynamicinvoke "makeConcatWithConstants" (v) ("Failed to get short name for \u0001"); v = newarray (java.lang.Object)[1]; v[0] = v; specialinvoke v.(java.lang.String,java.lang.Throwable,java.lang.String,java.lang.Object[])>("KERBEROS", v, v, v); throw v; label: v := @caughtexception; v = v.; v = dynamicinvoke "makeConcatWithConstants" (v) ("KerberosName(\u) failed: %s\n%s"); v = newarray (java.lang.Object)[2]; v[0] = v; v = staticinvoke (v); v[1] = v; specialinvoke v.("KERBEROS", v, v); label: return; catch java.io.IOException from label to label with label; catch java.lang.IllegalArgumentException from label to label with label; } protected void printDefaultRealm() { java.lang.Throwable v, v; java.lang.Object[] v, v, v, v, v; java.lang.ReflectiveOperationException v; java.lang.String v, v, v, v, v; oadd.org.apache.hadoop.security.KDiag$KerberosDiagsFailure v; boolean v; org.slf4j.Logger v; oadd.org.apache.hadoop.security.KDiag v; java.lang.reflect.InvocationTargetException v; v := @this: oadd.org.apache.hadoop.security.KDiag; label: v = staticinvoke (); v = newarray (java.lang.Object)[1]; v[0] = v; specialinvoke v.("Default Realm = %s", v); if v != null goto label; v = newarray (java.lang.Object)[0]; specialinvoke v.("KERBEROS", "Host has no default realm", v); label: goto label; label: v := @caughtexception; v = new oadd.org.apache.hadoop.security.KDiag$KerberosDiagsFailure; v = dynamicinvoke "makeConcatWithConstants" (v) ("Failed to invoke krb.Config.getDefaultRealm: %s: \u0001"); v = newarray (java.lang.Object)[1]; v[0] = v; specialinvoke v.(java.lang.String,java.lang.Throwable,java.lang.String,java.lang.Object[])>("JVM", v, v, v); throw v; label: v := @caughtexception; v = virtualinvoke v.(); if v == null goto label; v = virtualinvoke v.(); goto label; label: v = v; label: v = virtualinvoke v.(); v = virtualinvoke v.("Cannot locate default realm"); if v == 0 goto label; v = newarray (java.lang.Object)[0]; specialinvoke v.("KERBEROS", "Host has no default realm", v); v = ; v = virtualinvoke v.(); interfaceinvoke v.(v, v); goto label; label: v = newarray (java.lang.Object)[2]; v[0] = v; v = staticinvoke (v); v[1] = v; specialinvoke v.("KERBEROS", "Kerberos.getDefaultRealm() failed: %s\n%s", v); label: return; catch java.lang.ClassNotFoundException from label to label with label; catch java.lang.IllegalAccessException from label to label with label; catch java.lang.NoSuchMethodException from label to label with label; catch java.lang.reflect.InvocationTargetException from label to label with label; } private void validateHadoopTokenFiles(oadd.org.apache.hadoop.conf.Configuration) throws java.lang.ClassNotFoundException, oadd.org.apache.hadoop.security.KDiag$KerberosDiagsFailure, java.lang.NoSuchMethodException, java.lang.SecurityException { java.lang.Object[] v, v, v, v; java.lang.String[] v; int v, v, v; oadd.org.apache.hadoop.conf.Configuration v; java.lang.String v, v, v, v, v, v, v; oadd.org.apache.hadoop.security.KDiag v; java.io.File v; v := @this: oadd.org.apache.hadoop.security.KDiag; v := @parameter: oadd.org.apache.hadoop.conf.Configuration; v = newarray (java.lang.Object)[0]; specialinvoke v.("Locating Hadoop token files", v); v = staticinvoke ("hadoop.token.files"); if v == null goto label; v = dynamicinvoke "makeConcatWithConstants" (v) ("Found hadoop.token.files in system properties : \u0001"); v = newarray (java.lang.Object)[0]; specialinvoke v.(v, v); label: v = virtualinvoke v.("hadoop.token.files"); if v == null goto label; v = virtualinvoke v.("hadoop.token.files"); v = dynamicinvoke "makeConcatWithConstants" (v) ("Found hadoop.token.files in hadoop configuration : \u0001"); v = newarray (java.lang.Object)[0]; specialinvoke v.(v, v); v = staticinvoke ("hadoop.token.files"); if v == null goto label; v = newarray (java.lang.Object)[0]; specialinvoke v.("hadoop.token.files in the system properties overrides the one specified in hadoop configuration", v); goto label; label: v = virtualinvoke v.("hadoop.token.files"); label: if v == null goto label; v = staticinvoke (v); v = lengthof v; v = 0; label: if v >= v goto label; v = v[v]; v = virtualinvoke v.(); if v <= 0 goto label; v = new java.io.File; specialinvoke v.(java.lang.String)>(v); specialinvoke v.(v, "TOKEN", "token"); specialinvoke v.(v, v, "TOKEN", "token"); label: v = v + 1; goto label; label: return; } private void validateKrb5File() throws java.io.IOException { java.lang.Object[] v, v, v, v, v; oadd.org.apache.hadoop.security.KDiag v; java.io.File v; java.lang.String v, v, v; boolean v, v; v := @this: oadd.org.apache.hadoop.security.KDiag; v = ; if v != 0 goto label; v = newarray (java.lang.Object)[0]; specialinvoke v.("Locating Kerberos configuration file", v); v = "/etc/krb.conf"; v = staticinvoke ("java.security.krb.conf"); if v == null goto label; v = virtualinvoke v.(); if v != 0 goto label; v = newarray (java.lang.Object)[2]; v[0] = "java.security.krb.conf"; v[1] = v; specialinvoke v.("Setting kerberos path from sysprop %s: \"%s\"", v); v = v; label: v = staticinvoke ("KRB5_CONFIG"); if v == null goto label; v = newarray (java.lang.Object)[2]; v[0] = "KRB5_CONFIG"; v[1] = v; specialinvoke v.("Setting kerberos path from environment variable %s: \"%s\"", v); v = v; if v == null goto label; v = newarray (java.lang.Object)[3]; v[0] = "java.security.krb.conf"; v[1] = "KRB5_CONFIG"; v[2] = "KRB5_CONFIG"; specialinvoke v.("Warning - both %s and %s were set - %s takes priority", v); label: v = new java.io.File; specialinvoke v.(java.lang.String)>(v); v = newarray (java.lang.Object)[1]; v[0] = v; specialinvoke v.("Kerberos configuration file = %s", v); specialinvoke v.(v); specialinvoke v.(); label: return; } private void dumpKeytab(java.io.File) throws java.io.IOException { java.lang.Object[] v, v, v, v; java.lang.Integer v, v, v; org.apache.kerby.kerberos.kerb.type.base.EncryptionKey v; org.apache.kerby.kerberos.kerb.type.KerberosTime v; int v, v, v, v; org.apache.kerby.kerberos.kerb.type.base.EncryptionType v; org.apache.kerby.kerberos.kerb.keytab.Keytab v; boolean v, v; java.util.Iterator v, v; oadd.org.apache.hadoop.security.KDiag v; java.io.File v, v; java.util.List v, v; java.lang.Object v, v; org.apache.kerby.kerberos.kerb.type.base.PrincipalName v; v := @this: oadd.org.apache.hadoop.security.KDiag; v := @parameter: java.io.File; v = newarray (java.lang.Object)[1]; v[0] = v; specialinvoke v.("Examining keytab %s", v); v = virtualinvoke v.(); specialinvoke v.(v, "KERBEROS", "keytab"); v = staticinvoke (v); v = virtualinvoke v.(); v = newarray (java.lang.Object)[1]; v = interfaceinvoke v.(); v = staticinvoke (v); v[0] = v; specialinvoke v.("keytab principal count: %d", v); v = 0; v = interfaceinvoke v.(); label: v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); v = virtualinvoke v.(v); v = interfaceinvoke v.(); v = v + v; v = interfaceinvoke v.(); label: v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); v = virtualinvoke v.(); v = newarray (java.lang.Object)[4]; v = virtualinvoke v.(); v[0] = v; v = virtualinvoke v.(); v = staticinvoke (v); v[1] = v; v = virtualinvoke v.(); v[2] = v; v = virtualinvoke v.(); v[3] = v; specialinvoke v.(" %s: version=%d expires=%s encryption=%s", v); goto label; label: v = newarray (java.lang.Object)[1]; v = staticinvoke (v); v[0] = v; specialinvoke v.("keytab entry count: %d", v); specialinvoke v.(); return; } private void loginFromKeytab() throws java.io.IOException { java.lang.Object[] v, v, v, v, v; java.lang.String v, v, v, v, v, v; boolean v; oadd.org.apache.hadoop.security.UserGroupInformation v; org.slf4j.Logger v; oadd.org.apache.hadoop.security.KDiag v; java.io.File v, v, v; java.lang.IllegalAccessError v; v := @this: oadd.org.apache.hadoop.security.KDiag; v = v.; if v == null goto label; v = v.; v = virtualinvoke v.(); v = newarray (java.lang.Object)[2]; v[0] = v; v = v.; v[1] = v; specialinvoke v.("Using keytab %s principal %s", v); v = v.; v = v.; if v != null goto label; v = 1; goto label; label: v = 0; label: v = newarray (java.lang.Object)[0]; specialinvoke v.(v, "KERBEROS", "No principal defined", v); v = v.; v = virtualinvoke v.(); v = staticinvoke (v, v); specialinvoke v.(v, v); v = v.; specialinvoke v.(v, v); v = newarray (java.lang.Object)[0]; specialinvoke v.("Attempting to relogin", v); label: staticinvoke (1); virtualinvoke v.(); label: goto label; label: v := @caughtexception; v = newarray (java.lang.Object)[0]; specialinvoke v.("UGI", "Failed to reset UGI -and so could not try to relogin", v); v = ; interfaceinvoke v.("Failed to reset UGI: {}", v, v); goto label; label: v = newarray (java.lang.Object)[0]; specialinvoke v.("No keytab: attempting to log in is as current user", v); label: return; catch java.lang.IllegalAccessError from label to label with label; } private void dumpUGI(java.lang.String, oadd.org.apache.hadoop.security.UserGroupInformation) throws java.io.IOException { java.lang.Object[] v, v, v, v, v, v, v, v, v, v, v; java.lang.String[] v; oadd.org.apache.hadoop.security.UserGroupInformation$AuthenticationMethod v, v; int v, v; java.lang.Boolean v; oadd.org.apache.hadoop.security.Credentials v; java.lang.String v, v; boolean v, v, v; oadd.org.apache.hadoop.security.UserGroupInformation v; java.util.Iterator v; oadd.org.apache.hadoop.security.KDiag v; java.util.List v; java.lang.Object v; v := @this: oadd.org.apache.hadoop.security.KDiag; v := @parameter: java.lang.String; v := @parameter: oadd.org.apache.hadoop.security.UserGroupInformation; v = newarray (java.lang.Object)[0]; specialinvoke v.(v, v); v = newarray (java.lang.Object)[1]; v[0] = v; specialinvoke v.("UGI instance = %s", v); v = newarray (java.lang.Object)[1]; v = virtualinvoke v.(); v = staticinvoke (v); v[0] = v; specialinvoke v.("Has kerberos credentials: %b", v); v = newarray (java.lang.Object)[1]; v = virtualinvoke v.(); v[0] = v; specialinvoke v.("Authentication method: %s", v); v = newarray (java.lang.Object)[1]; v = virtualinvoke v.(); v[0] = v; specialinvoke v.("Real Authentication method: %s", v); v = newarray (java.lang.Object)[0]; specialinvoke v.("Group names", v); v = virtualinvoke v.(); v = lengthof v; v = 0; label: if v >= v goto label; v = v[v]; v = newarray (java.lang.Object)[0]; specialinvoke v.(v, v); v = v + 1; goto label; label: v = newarray (java.lang.Object)[0]; specialinvoke v.("Credentials", v); v = virtualinvoke v.(); v = virtualinvoke v.(); v = newarray (java.lang.Object)[0]; specialinvoke v.("Secret keys", v); v = interfaceinvoke v.(); if v != 0 goto label; v = interfaceinvoke v.(); label: v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); v = newarray (java.lang.Object)[1]; v[0] = v; specialinvoke v.("%s", v); goto label; label: v = newarray (java.lang.Object)[0]; specialinvoke v.("(none)", v); label: virtualinvoke v.(v); return; } private void validateUGI(java.lang.String, oadd.org.apache.hadoop.security.UserGroupInformation) { java.lang.Object[] v, v, v; oadd.org.apache.hadoop.security.UserGroupInformation v; oadd.org.apache.hadoop.security.UserGroupInformation$AuthenticationMethod v, v, v; oadd.org.apache.hadoop.security.KDiag v; java.lang.String v; boolean v, v, v, v; v := @this: oadd.org.apache.hadoop.security.KDiag; v := @parameter: java.lang.String; v := @parameter: oadd.org.apache.hadoop.security.UserGroupInformation; v = virtualinvoke v.(); v = ; if v != v goto label; v = 1; goto label; label: v = 0; label: v = newarray (java.lang.Object)[1]; v[0] = v; v = specialinvoke v.(v, "LOGIN", "User %s is not authenticated by Kerberos", v); if v == 0 goto label; v = virtualinvoke v.(); v = newarray (java.lang.Object)[2]; v[0] = v; v[1] = v; specialinvoke v.(v, "LOGIN", "%s: No kerberos credentials for %s", v); v = virtualinvoke v.(); if v == null goto label; v = 1; goto label; label: v = 0; label: v = newarray (java.lang.Object)[2]; v[0] = v; v[1] = v; specialinvoke v.(v, "LOGIN", "%s: Null AuthenticationMethod for %s", v); label: return; } private void validateKinitExecutable() { java.lang.Object[] v, v; oadd.org.apache.hadoop.security.KDiag v; java.io.File v; oadd.org.apache.hadoop.conf.Configuration v; java.lang.String v; boolean v, v; v := @this: oadd.org.apache.hadoop.security.KDiag; v = virtualinvoke v.(); v = virtualinvoke v.("hadoop.kerberos.kinit.command", ""); v = virtualinvoke v.(); if v != 0 goto label; v = new java.io.File; specialinvoke v.(java.lang.String)>(v); v = newarray (java.lang.Object)[2]; v[0] = "hadoop.kerberos.kinit.command"; v[1] = v; specialinvoke v.("%s = %s", v); v = virtualinvoke v.(); if v == 0 goto label; specialinvoke v.(v, "KERBEROS", "hadoop.kerberos.kinit.command"); goto label; label: v = newarray (java.lang.Object)[1]; v[0] = v; specialinvoke v.("Executable %s is relative -must be on the PATH", v); specialinvoke v.("PATH"); label: return; } private void validateSasl(java.lang.String) { java.lang.Object[] v, v, v; java.lang.RuntimeException v; oadd.org.apache.hadoop.security.KDiag v; java.lang.Class v; oadd.org.apache.hadoop.conf.Configuration v, v; java.lang.String v, v; oadd.org.apache.hadoop.security.KDiag$KerberosDiagsFailure v; v := @this: oadd.org.apache.hadoop.security.KDiag; v := @parameter: java.lang.String; v = newarray (java.lang.Object)[1]; v[0] = v; specialinvoke v.("Resolving SASL property %s", v); v = virtualinvoke v.(); v = virtualinvoke v.(v); label: v = virtualinvoke v.(); v = virtualinvoke v.(v, class "Loadd/org/apache/hadoop/security/SaslPropertiesResolver;", class "Loadd/org/apache/hadoop/security/SaslPropertiesResolver;"); v = newarray (java.lang.Object)[1]; v[0] = v; specialinvoke v.("Resolver is %s", v); label: goto label; label: v := @caughtexception; v = new oadd.org.apache.hadoop.security.KDiag$KerberosDiagsFailure; v = newarray (java.lang.Object)[2]; v[0] = v; v[1] = v; specialinvoke v.(java.lang.String,java.lang.Throwable,java.lang.String,java.lang.Object[])>("SASL", v, "Failed to load %s class %s", v); throw v; label: return; catch java.lang.RuntimeException from label to label with label; } private void validateJAAS(boolean) throws java.io.IOException { java.lang.Object[] v, v, v; oadd.org.apache.hadoop.security.KDiag v; java.io.File v; java.lang.String v; boolean v, v; v := @this: oadd.org.apache.hadoop.security.KDiag; v := @parameter: boolean; v = staticinvoke ("java.security.auth.login.config"); if v == 0 goto label; if v == null goto label; v = 1; goto label; label: v = 0; label: v = newarray (java.lang.Object)[0]; specialinvoke v.(v, "JAAS", "No JAAS file specified in java.security.auth.login.config", v); label: if v == null goto label; v = newarray (java.lang.Object)[0]; specialinvoke v.("JAAS", v); v = new java.io.File; specialinvoke v.(java.lang.String)>(v); v = newarray (java.lang.Object)[2]; v[0] = "java.security.auth.login.config"; v[1] = v; specialinvoke v.("JAAS file is defined in %s: %s", v); specialinvoke v.(v, "JAAS", "JAAS file defined in java.security.auth.login.config"); specialinvoke v.(v); specialinvoke v.(); label: return; } private void validateNTPConf() throws java.io.IOException { java.lang.Object[] v; java.lang.String v; oadd.org.apache.hadoop.security.KDiag v; java.io.File v; boolean v, v, v; v := @this: oadd.org.apache.hadoop.security.KDiag; v = ; if v != 0 goto label; v = new java.io.File; specialinvoke v.(java.lang.String)>("/etc/ntp.conf"); v = virtualinvoke v.(); if v == 0 goto label; v = dynamicinvoke "makeConcatWithConstants" (v) ("NTP file: \u0001"); v = specialinvoke v.(v, "JAAS", v); if v == 0 goto label; v = newarray (java.lang.Object)[0]; specialinvoke v.("NTP", v); specialinvoke v.(v); specialinvoke v.(); label: return; } private boolean verifyFileIsValid(java.io.File, java.lang.String, java.lang.String) { java.lang.Object[] v, v, v, v; long v; byte v; java.lang.String v, v; boolean v, v, v, v, v, v, v, v, v; oadd.org.apache.hadoop.security.KDiag v; java.io.File v; v := @this: oadd.org.apache.hadoop.security.KDiag; v := @parameter: java.io.File; v := @parameter: java.lang.String; v := @parameter: java.lang.String; v = virtualinvoke v.(); v = newarray (java.lang.Object)[2]; v[0] = v; v[1] = v; v = specialinvoke v.(v, v, "%s file does not exist: %s", v); if v == 0 goto label; v = virtualinvoke v.(); v = newarray (java.lang.Object)[2]; v[0] = v; v[1] = v; v = specialinvoke v.(v, v, "%s path does not refer to a file: %s", v); if v == 0 goto label; v = virtualinvoke v.(); v = v cmp 0L; if v == 0 goto label; v = 1; goto label; label: v = 0; label: v = newarray (java.lang.Object)[2]; v[0] = v; v[1] = v; v = specialinvoke v.(v, v, "%s file is empty: %s", v); if v == 0 goto label; v = virtualinvoke v.(); v = newarray (java.lang.Object)[2]; v[0] = v; v[1] = v; v = specialinvoke v.(v, v, "%s file is not readable: %s", v); if v == 0 goto label; v = 1; goto label; label: v = 0; label: return v; } public void dumpTokens(oadd.org.apache.hadoop.security.UserGroupInformation) { java.lang.Object[] v, v; oadd.org.apache.hadoop.security.UserGroupInformation v; java.util.Iterator v; java.util.Collection v; oadd.org.apache.hadoop.io.Text v; oadd.org.apache.hadoop.security.KDiag v; java.lang.Integer v; int v; oadd.org.apache.hadoop.security.Credentials v; java.lang.Object v; boolean v; v := @this: oadd.org.apache.hadoop.security.KDiag; v := @parameter: oadd.org.apache.hadoop.security.UserGroupInformation; v = virtualinvoke v.(); v = virtualinvoke v.(); v = newarray (java.lang.Object)[1]; v = interfaceinvoke v.(); v = staticinvoke (v); v[0] = v; specialinvoke v.("Token Count: %d", v); v = interfaceinvoke v.(); label: v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); v = newarray (java.lang.Object)[1]; v = virtualinvoke v.(); v[0] = v; specialinvoke v.("Token %s", v); goto label; label: specialinvoke v.(); return; } private boolean getAndSet(java.lang.String) { java.lang.String v; oadd.org.apache.hadoop.security.KDiag v; boolean v; v := @this: oadd.org.apache.hadoop.security.KDiag; v := @parameter: java.lang.String; v = staticinvoke (v); staticinvoke (v, "true"); return v; } private void flush() { java.io.PrintStream v, v; java.io.PrintWriter v, v; oadd.org.apache.hadoop.security.KDiag v; v := @this: oadd.org.apache.hadoop.security.KDiag; v = v.; if v == null goto label; v = v.; virtualinvoke v.(); goto label; label: v = ; virtualinvoke v.(); label: v = ; virtualinvoke v.(); return; } private transient void println(java.lang.String, java.lang.Object[]) { java.io.PrintStream v; java.io.PrintWriter v, v; java.lang.Object[] v; java.lang.String v, v; oadd.org.apache.hadoop.security.KDiag v; v := @this: oadd.org.apache.hadoop.security.KDiag; v := @parameter: java.lang.String; v := @parameter: java.lang.Object[]; specialinvoke v.