public class oadd.org.apache.hadoop.security.UserGroupInformation extends java.lang.Object { static final org.slf4j.Logger LOG; private static final float TICKET_RENEW_WINDOW; private static boolean shouldRenewImmediatelyForTests; static final java.lang.String HADOOP_USER_NAME; static final java.lang.String HADOOP_PROXY_USER; static oadd.org.apache.hadoop.security.UserGroupInformation$UgiMetrics metrics; private static oadd.org.apache.hadoop.security.UserGroupInformation$AuthenticationMethod authenticationMethod; private static oadd.org.apache.hadoop.security.Groups groups; private static long kerberosMinSecondsBeforeRelogin; private static oadd.org.apache.hadoop.conf.Configuration conf; public static final java.lang.String HADOOP_TOKEN_FILE_LOCATION; private static final java.util.concurrent.atomic.AtomicReference loginUserRef; private final javax.security.auth.Subject subject; private final oadd.org.apache.hadoop.security.User user; private static java.lang.String OS_LOGIN_MODULE_NAME; private static java.lang.Class OS_PRINCIPAL_CLASS; private static final boolean windows; private static final boolean is64Bit; private static final boolean aix; static final boolean $assertionsDisabled; public static void setShouldRenewImmediatelyForTests(boolean) { boolean v; v := @parameter: boolean; = v; return; } public static void reattachMetrics() { staticinvoke (); return; } public static boolean isInitialized() { oadd.org.apache.hadoop.conf.Configuration v; boolean v; v = ; if v == null goto label; v = 1; goto label; label: v = 0; label: return v; } private static void ensureInitialized() { java.lang.Throwable v; oadd.org.apache.hadoop.conf.Configuration v; boolean v, v; v = staticinvoke (); if v != 0 goto label; entermonitor class "Loadd/org/apache/hadoop/security/UserGroupInformation;"; label: v = staticinvoke (); if v != 0 goto label; v = new oadd.org.apache.hadoop.conf.Configuration; specialinvoke v.()>(); staticinvoke (v, 0); label: exitmonitor class "Loadd/org/apache/hadoop/security/UserGroupInformation;"; label: goto label; label: v := @caughtexception; exitmonitor class "Loadd/org/apache/hadoop/security/UserGroupInformation;"; throw v; label: return; catch java.lang.Throwable from label to label with label; } private static synchronized void initialize(oadd.org.apache.hadoop.conf.Configuration, boolean) { oadd.org.apache.hadoop.security.Groups v, v; long v, v; oadd.org.apache.hadoop.security.UserGroupInformation$AuthenticationMethod v; int[] v; int v, v, v, v, v; oadd.org.apache.hadoop.conf.Configuration v; java.lang.String v, v, v; boolean v, v, v; oadd.org.apache.hadoop.metrics.lib.MutableQuantiles[] v, v; java.io.IOException v; java.lang.NumberFormatException v; java.lang.RuntimeException v; oadd.org.apache.hadoop.metrics.lib.MetricsRegistry v; java.lang.IllegalArgumentException v; oadd.org.apache.hadoop.security.UserGroupInformation$UgiMetrics v, v, v; oadd.org.apache.hadoop.metrics.lib.MutableQuantiles v; v := @parameter: oadd.org.apache.hadoop.conf.Configuration; v := @parameter: boolean; v = staticinvoke (v); = v; if v != 0 goto label; v = staticinvoke (); if v != 0 goto label; label: staticinvoke (v); label: goto label; label: v := @caughtexception; v = new java.lang.RuntimeException; specialinvoke v.(java.lang.String,java.lang.Throwable)>("Problem with Kerberos auth_to_local name configuration", v); throw v; label: v = virtualinvoke v.("hadoop.kerberos.min.seconds.before.relogin", 60L); v = 1000L * v; = v; label: goto label; label: v := @caughtexception; v = new java.lang.IllegalArgumentException; v = virtualinvoke v.("hadoop.kerberos.min.seconds.before.relogin"); v = dynamicinvoke "makeConcatWithConstants" (v) ("Invalid attribute value for hadoop.kerberos.min.seconds.before.relogin of \u0001"); specialinvoke v.(java.lang.String)>(v); throw v; label: v = ; v = v instanceof oadd.org.apache.hadoop.security.UserGroupInformation$TestingGroups; if v != 0 goto label; v = staticinvoke (v); = v; label: = v; v = ; v = v.; if v != null goto label; v = virtualinvoke v.("hadoop.user.group.metrics.percentiles.intervals"); if v == null goto label; v = lengthof v; if v <= 0 goto label; v = lengthof v; v = newarray (oadd.org.apache.hadoop.metrics.lib.MutableQuantiles)[v]; v = 0; label: if v >= v goto label; v = ; v = v.; v = v[v]; v = dynamicinvoke "makeConcatWithConstants" (v) ("getGroups\u0001s"); v = v[v]; v = virtualinvoke v.(v, "Get groups", "ops", "latency", v); v[v] = v; v = v + 1; goto label; label: v = ; v. = v; label: return; catch java.io.IOException from label to label with label; catch java.lang.NumberFormatException from label to label with label; } public static void setConfiguration(oadd.org.apache.hadoop.conf.Configuration) { oadd.org.apache.hadoop.conf.Configuration v; v := @parameter: oadd.org.apache.hadoop.conf.Configuration; staticinvoke (v, 1); return; } public static void reset() { = null; = null; = null; = 0L; staticinvoke (null); staticinvoke (null); return; } public static boolean isSecurityEnabled() { oadd.org.apache.hadoop.security.UserGroupInformation$AuthenticationMethod v; boolean v, v; v = ; v = staticinvoke (v); if v != 0 goto label; v = 1; goto label; label: v = 0; label: return v; } private static boolean isAuthenticationMethodEnabled(oadd.org.apache.hadoop.security.UserGroupInformation$AuthenticationMethod) { oadd.org.apache.hadoop.security.UserGroupInformation$AuthenticationMethod v, v; boolean v; v := @parameter: oadd.org.apache.hadoop.security.UserGroupInformation$AuthenticationMethod; staticinvoke (); v = ; if v != v goto label; v = 1; goto label; label: v = 0; label: return v; } private static java.lang.String getOSLoginModuleName() { java.lang.String v, v, v; boolean v, v, v, v, v, v; v = ; if v == 0 goto label; v = ; if v == 0 goto label; v = ; if v == 0 goto label; v = "com.ibm.security.auth.module.Win64LoginModule"; goto label; label: v = "com.ibm.security.auth.module.NTLoginModule"; label: return v; label: v = ; if v == 0 goto label; v = ; if v == 0 goto label; v = "com.ibm.security.auth.module.AIX64LoginModule"; goto label; label: v = "com.ibm.security.auth.module.AIXLoginModule"; label: return v; label: return "com.ibm.security.auth.module.LinuxLoginModule"; label: v = ; if v == 0 goto label; v = "com.sun.security.auth.module.NTLoginModule"; goto label; label: v = "com.sun.security.auth.module.UnixLoginModule"; label: return v; } private static java.lang.Class getOsPrincipalClass() { org.slf4j.Logger v; java.lang.Class v; java.lang.ClassNotFoundException v; java.lang.ClassLoader v; java.lang.String v, v, v, v; boolean v, v, v, v, v; v = staticinvoke (); label: v = ; if v == 0 goto label; v = ; if v == 0 goto label; v = "com.ibm.security.auth.UsernamePrincipal"; goto label; label: v = ; if v == 0 goto label; v = "com.ibm.security.auth.NTUserPrincipal"; goto label; label: v = ; if v == 0 goto label; v = "com.ibm.security.auth.AIXPrincipal"; goto label; label: v = "com.ibm.security.auth.LinuxPrincipal"; goto label; label: v = ; if v == 0 goto label; v = "com.sun.security.auth.NTUserPrincipal"; goto label; label: v = "com.sun.security.auth.UnixPrincipal"; label: v = v; label: v = virtualinvoke v.(v); label: return v; label: v := @caughtexception; v = ; v = virtualinvoke v.(); v = dynamicinvoke "makeConcatWithConstants" (v) ("Unable to find JAAS classes:\u0001"); interfaceinvoke v.(v); return null; catch java.lang.ClassNotFoundException from label to label with label; } private static oadd.org.apache.hadoop.security.UserGroupInformation$HadoopLoginContext newLoginContext(java.lang.String, javax.security.auth.Subject, oadd.org.apache.hadoop.security.UserGroupInformation$HadoopConfiguration) throws javax.security.auth.login.LoginException { java.lang.Throwable v; oadd.org.apache.hadoop.security.UserGroupInformation$HadoopConfiguration v; javax.security.auth.Subject v; java.lang.Thread v; java.lang.Class v; java.lang.ClassLoader v, v; java.lang.String v; oadd.org.apache.hadoop.security.UserGroupInformation$HadoopLoginContext v; v := @parameter: java.lang.String; v := @parameter: javax.security.auth.Subject; v := @parameter: oadd.org.apache.hadoop.security.UserGroupInformation$HadoopConfiguration; v = staticinvoke (); v = virtualinvoke v.(); v = class "Loadd/org/apache/hadoop/security/UserGroupInformation$HadoopLoginModule;"; v = virtualinvoke v.(); virtualinvoke v.(v); label: v = new oadd.org.apache.hadoop.security.UserGroupInformation$HadoopLoginContext; specialinvoke v.(java.lang.String,javax.security.auth.Subject,oadd.org.apache.hadoop.security.UserGroupInformation$HadoopConfiguration)>(v, v, v); label: virtualinvoke v.(v); return v; label: v := @caughtexception; virtualinvoke v.(v); throw v; catch java.lang.Throwable from label to label with label; } private oadd.org.apache.hadoop.security.UserGroupInformation$HadoopLoginContext getLogin() { oadd.org.apache.hadoop.security.UserGroupInformation v; oadd.org.apache.hadoop.security.User v; javax.security.auth.login.LoginContext v; boolean v; v := @this: oadd.org.apache.hadoop.security.UserGroupInformation; v = v.; v = virtualinvoke v.(); v = v instanceof oadd.org.apache.hadoop.security.UserGroupInformation$HadoopLoginContext; if v != 0 goto label; v = null; label: return v; } private void setLogin(javax.security.auth.login.LoginContext) { oadd.org.apache.hadoop.security.User v; oadd.org.apache.hadoop.security.UserGroupInformation v; javax.security.auth.login.LoginContext v; v := @this: oadd.org.apache.hadoop.security.UserGroupInformation; v := @parameter: javax.security.auth.login.LoginContext; v = v.; virtualinvoke v.(v); return; } private void setLastLogin(long) { oadd.org.apache.hadoop.security.User v; long v; oadd.org.apache.hadoop.security.UserGroupInformation v; v := @this: oadd.org.apache.hadoop.security.UserGroupInformation; v := @parameter: long; v = v.; virtualinvoke v.(v); return; } void (javax.security.auth.Subject) { java.lang.IllegalStateException v; oadd.org.apache.hadoop.security.UserGroupInformation v; java.util.Iterator v; java.util.Set v; javax.security.auth.Subject v; oadd.org.apache.hadoop.security.User v, v; java.lang.Object v; java.lang.String v; v := @this: oadd.org.apache.hadoop.security.UserGroupInformation; v := @parameter: javax.security.auth.Subject; specialinvoke v.()>(); v. = v; v = virtualinvoke v.(class "Loadd/org/apache/hadoop/security/User;"); v = interfaceinvoke v.(); v = interfaceinvoke v.(); v. = v; v = v.; if v == null goto label; v = v.; v = virtualinvoke v.(); if v != null goto label; label: v = new java.lang.IllegalStateException; specialinvoke v.(java.lang.String)>("Subject does not contain a valid User"); throw v; label: return; } public boolean hasKerberosCredentials() { oadd.org.apache.hadoop.security.UserGroupInformation v; oadd.org.apache.hadoop.security.User v; oadd.org.apache.hadoop.security.UserGroupInformation$AuthenticationMethod v, v; boolean v; v := @this: oadd.org.apache.hadoop.security.UserGroupInformation; v = v.; v = virtualinvoke v.(); v = ; if v != v goto label; v = 1; goto label; label: v = 0; label: return v; } public static oadd.org.apache.hadoop.security.UserGroupInformation getCurrentUser() throws java.io.IOException { java.security.AccessControlContext v; oadd.org.apache.hadoop.security.UserGroupInformation v, v; java.util.Set v; javax.security.auth.Subject v; boolean v; v = staticinvoke (); v = staticinvoke (v); if v == null goto label; v = virtualinvoke v.(class "Loadd/org/apache/hadoop/security/User;"); v = interfaceinvoke v.(); if v == 0 goto label; label: v = staticinvoke (); return v; label: v = new oadd.org.apache.hadoop.security.UserGroupInformation; specialinvoke v.(javax.security.auth.Subject)>(v); return v; } public static oadd.org.apache.hadoop.security.UserGroupInformation getBestUGI(java.lang.String, java.lang.String) throws java.io.IOException { oadd.org.apache.hadoop.security.UserGroupInformation v, v, v; java.lang.String v, v; v := @parameter: java.lang.String; v := @parameter: java.lang.String; if v == null goto label; v = staticinvoke (v, v); return v; label: if v != null goto label; v = staticinvoke (); return v; label: v = staticinvoke (v); return v; } public static oadd.org.apache.hadoop.security.UserGroupInformation getUGIFromTicketCache(java.lang.String, java.lang.String) throws java.io.IOException { oadd.org.apache.hadoop.security.UserGroupInformation v, v; oadd.org.apache.hadoop.security.UserGroupInformation$AuthenticationMethod v; oadd.org.apache.hadoop.security.UserGroupInformation$LoginParam v, v; oadd.org.apache.hadoop.security.UserGroupInformation$LoginParams v; java.lang.String v, v; boolean v; v := @parameter: java.lang.String; v := @parameter: java.lang.String; v = ; v = staticinvoke (v); if v != 0 goto label; v = staticinvoke (null, v); return v; label: v = new oadd.org.apache.hadoop.security.UserGroupInformation$LoginParams; specialinvoke v.()>(); v = ; virtualinvoke v.(v, v); v = ; virtualinvoke v.(v, v); v = staticinvoke (null, v); return v; } public static oadd.org.apache.hadoop.security.UserGroupInformation getUGIFromSubject(javax.security.auth.Subject) throws java.io.IOException { oadd.org.apache.hadoop.security.UserGroupInformation v; java.util.Set v; javax.security.auth.Subject v; oadd.org.apache.hadoop.security.KerberosAuthException v, v; boolean v; v := @parameter: javax.security.auth.Subject; if v != null goto label; v = new oadd.org.apache.hadoop.security.KerberosAuthException; specialinvoke v.(java.lang.String)>("Subject must not be null"); throw v; label: v = virtualinvoke v.(class "Ljavax/security/auth/kerberos/KerberosPrincipal;"); v = interfaceinvoke v.(); if v == 0 goto label; v = new oadd.org.apache.hadoop.security.KerberosAuthException; specialinvoke v.(java.lang.String)>("Provided Subject must contain a KerberosPrincipal"); throw v; label: v = staticinvoke (v, null); return v; } public static oadd.org.apache.hadoop.security.UserGroupInformation getLoginUser() throws java.io.IOException { oadd.org.apache.hadoop.security.UserGroupInformation v; java.lang.Object v; java.util.concurrent.atomic.AtomicReference v, v, v; boolean v; v = ; v = virtualinvoke v.(); if v != null goto label; v = staticinvoke (null); label: v = ; v = virtualinvoke v.(null, v); if v == 0 goto label; v = v; virtualinvoke v.(0); goto label; label: v = ; virtualinvoke v.(); label: if v == null goto label; label: return v; } public static java.lang.String trimLoginMethod(java.lang.String) { int v; java.lang.String v; v := @parameter: java.lang.String; v = virtualinvoke v.(32); if v < 0 goto label; v = virtualinvoke v.(0, v); label: return v; } public static void loginUserFromSubject(javax.security.auth.Subject) throws java.io.IOException { oadd.org.apache.hadoop.security.UserGroupInformation v; javax.security.auth.Subject v; v := @parameter: javax.security.auth.Subject; v = staticinvoke (v); staticinvoke (v); return; } private static oadd.org.apache.hadoop.security.UserGroupInformation createLoginUser(javax.security.auth.Subject) throws java.io.IOException { java.lang.Integer v; oadd.org.apache.hadoop.conf.Configuration v, v, v; boolean v, v, v, v; java.io.FileNotFoundException v; java.lang.String[] v; int v, v, v, v; oadd.org.apache.hadoop.security.Credentials v, v; java.lang.String v, v, v, v, v, v, v, v, v; oadd.org.apache.hadoop.security.UserGroupInformation v, v, v; org.slf4j.Logger v, v, v, v, v, v; java.io.IOException v; java.io.File v, v; javax.security.auth.Subject v; v := @parameter: javax.security.auth.Subject; v = staticinvoke (v, null); label: v = staticinvoke ("HADOOP_PROXY_USER"); if v != null goto label; v = staticinvoke ("HADOOP_PROXY_USER"); if v != null goto label; v = v; goto label; label: v = staticinvoke (v, v); label: v = v; v = staticinvoke ("hadoop.token.files"); if v != null goto label; v = ; v = virtualinvoke v.("hadoop.token.files"); label: if v == null goto label; v = staticinvoke (v); v = lengthof v; v = 0; label: if v >= v goto label; v = v[v]; v = virtualinvoke v.(); if v <= 0 goto label; v = new java.io.File; specialinvoke v.(java.lang.String)>(v); v = virtualinvoke v.(); if v == 0 goto label; v = virtualinvoke v.(); if v == 0 goto label; v = ; v = staticinvoke (v, v); virtualinvoke v.(v); goto label; label: v = ; v = dynamicinvoke "makeConcatWithConstants" (v) ("tokenFile(\u) does not exist"); interfaceinvoke v.(v); label: v = v + 1; goto label; label: v = staticinvoke ("HADOOP_TOKEN_FILE_LOCATION"); if v == null goto label; v = new java.io.File; specialinvoke v.(java.lang.String)>(v); v = ; v = virtualinvoke v.(); interfaceinvoke v.("Reading credentials from location set in {}: {}", "HADOOP_TOKEN_FILE_LOCATION", v); v = virtualinvoke v.(); if v != 0 goto label; v = new java.io.FileNotFoundException; v = virtualinvoke v.(); v = dynamicinvoke "makeConcatWithConstants" (v) ("Source file \u from HADOOP_TOKEN_FILE_LOCATION not found"); specialinvoke v.(java.lang.String)>(v); throw v; label: v = ; v = staticinvoke (v, v); v = ; v = virtualinvoke v.(); v = staticinvoke (v); interfaceinvoke v.("Loaded {} tokens", v); virtualinvoke v.(v); label: goto label; label: v := @caughtexception; v = ; interfaceinvoke v.("failure to load login credentials", v); throw v; label: v = ; v = interfaceinvoke v.(); if v == 0 goto label; v = ; v = dynamicinvoke "makeConcatWithConstants" (v) ("UGI loginUser:\u0001"); interfaceinvoke v.(v); label: return v; catch java.io.IOException from label to label with label; } public static void setLoginUser(oadd.org.apache.hadoop.security.UserGroupInformation) { oadd.org.apache.hadoop.security.UserGroupInformation v; java.util.concurrent.atomic.AtomicReference v; v := @parameter: oadd.org.apache.hadoop.security.UserGroupInformation; v = ; virtualinvoke v.(v); return; } private java.lang.String getKeytab() { oadd.org.apache.hadoop.security.UserGroupInformation v; oadd.org.apache.hadoop.security.UserGroupInformation$HadoopConfiguration v; java.lang.Object v; oadd.org.apache.hadoop.security.UserGroupInformation$LoginParam v; oadd.org.apache.hadoop.security.UserGroupInformation$LoginParams v; oadd.org.apache.hadoop.security.UserGroupInformation$HadoopLoginContext v; v := @this: oadd.org.apache.hadoop.security.UserGroupInformation; v = specialinvoke v.(); if v == null goto label; v = virtualinvoke v.(); v = virtualinvoke v.(); v = ; v = virtualinvoke v.(v); goto label; label: v = null; label: return v; } private boolean isHadoopLogin() { oadd.org.apache.hadoop.security.UserGroupInformation v; oadd.org.apache.hadoop.security.UserGroupInformation$HadoopLoginContext v; boolean v; v := @this: oadd.org.apache.hadoop.security.UserGroupInformation; v = specialinvoke v.(); if v == null goto label; v = 1; goto label; label: v = 0; label: return v; } public boolean isFromKeytab() { oadd.org.apache.hadoop.security.UserGroupInformation v; java.lang.String v; boolean v, v, v; v := @this: oadd.org.apache.hadoop.security.UserGroupInformation; v = virtualinvoke v.(); if v == 0 goto label; v = specialinvoke v.(); if v == 0 goto label; v = specialinvoke v.(); if v == null goto label; v = 1; goto label; label: v = 0; label: return v; } private boolean isFromTicket() { oadd.org.apache.hadoop.security.UserGroupInformation v; java.lang.String v; boolean v, v, v; v := @this: oadd.org.apache.hadoop.security.UserGroupInformation; v = virtualinvoke v.(); if v == 0 goto label; v = specialinvoke v.(); if v == 0 goto label; v = specialinvoke v.(); if v != null goto label; v = 1; goto label; label: v = 0; label: return v; } private javax.security.auth.kerberos.KerberosTicket getTGT() { oadd.org.apache.hadoop.security.UserGroupInformation v; java.util.Iterator v; java.util.Set v; java.lang.Object v; javax.security.auth.Subject v; boolean v, v; v := @this: oadd.org.apache.hadoop.security.UserGroupInformation; v = v.; v = virtualinvoke v.(class "Ljavax/security/auth/kerberos/KerberosTicket;"); v = interfaceinvoke v.(); label: v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); v = staticinvoke (v); if v == 0 goto label; return v; label: return null; } private long getRefreshTime(javax.security.auth.kerberos.KerberosTicket) { oadd.org.apache.hadoop.security.UserGroupInformation v; java.util.Date v, v; long v, v, v, v; javax.security.auth.kerberos.KerberosTicket v; float v; v := @this: oadd.org.apache.hadoop.security.UserGroupInformation; v := @parameter: javax.security.auth.kerberos.KerberosTicket; v = virtualinvoke v.(); v = virtualinvoke v.(); v = virtualinvoke v.(); v = virtualinvoke v.(); v = v - v; v = v * 0.8F; v = v + v; return v; } public boolean shouldRelogin() { oadd.org.apache.hadoop.security.UserGroupInformation v; boolean v, v, v; v := @this: oadd.org.apache.hadoop.security.UserGroupInformation; v = virtualinvoke v.(); if v == 0 goto label; v = specialinvoke v.(); if v == 0 goto label; v = 1; goto label; label: v = 0; label: return v; } void spawnAutoRenewalThreadForUserCreds(boolean) { oadd.org.apache.hadoop.security.UserGroupInformation v; oadd.org.apache.hadoop.security.UserGroupInformation$AutoRenewalForUserCredsRunnable v; long v; javax.security.auth.kerberos.KerberosTicket v; java.lang.Thread v; oadd.org.apache.hadoop.conf.Configuration v; java.lang.String v, v, v; boolean v, v, v; v := @this: oadd.org.apache.hadoop.security.UserGroupInformation; v := @parameter: boolean; if v != 0 goto label; v = virtualinvoke v.(); if v == 0 goto label; v = virtualinvoke v.(); if v == 0 goto label; label: return; label: v = specialinvoke v.(); if v != null goto label; return; label: v = ; v = virtualinvoke v.("hadoop.kerberos.kinit.command", "kinit"); v = specialinvoke v.(v); v = new java.lang.Thread; v = new oadd.org.apache.hadoop.security.UserGroupInformation$AutoRenewalForUserCredsRunnable; specialinvoke v.(oadd.org.apache.hadoop.security.UserGroupInformation,javax.security.auth.kerberos.KerberosTicket,java.lang.String,long)>(v, v, v, v); specialinvoke v.(java.lang.Runnable)>(v); virtualinvoke v.(1); v = virtualinvoke v.(); v = dynamicinvoke "makeConcatWithConstants" (v) ("TGT Renewer for \u0001"); virtualinvoke v.(v); virtualinvoke v.(); return; } static long getNextTgtRenewalTime(long, long, oadd.org.apache.hadoop.io.retry.RetryPolicy) throws java.lang.Exception { long v, v, v, v, v, v, v; oadd.org.apache.hadoop.io.retry.RetryPolicy v; oadd.org.apache.hadoop.metrics.lib.MutableGaugeInt v; oadd.org.apache.hadoop.security.UserGroupInformation$UgiMetrics v; int v; oadd.org.apache.hadoop.io.retry.RetryPolicy$RetryAction v; v := @parameter: long; v := @parameter: long; v := @parameter: oadd.org.apache.hadoop.io.retry.RetryPolicy; v = ; v = v - v; v = ; v = v.; v = virtualinvoke v.(); v = interfaceinvoke v.(null, v, 0, 0); v = v.; v = v + v; v = staticinvoke (v, v); return v; } public static void loginUserFromKeytab(java.lang.String, java.lang.String) throws java.io.IOException { oadd.org.apache.hadoop.security.UserGroupInformation v; org.slf4j.Logger v; java.lang.String v, v, v; boolean v; v := @parameter: java.lang.String; v := @parameter: java.lang.String; v = staticinvoke (); if v != 0 goto label; return; label: v = staticinvoke (v, v); staticinvoke (v); v = ; v = dynamicinvoke "makeConcatWithConstants" (v, v) ("Login successful for user \u using keytab file \u0001"); interfaceinvoke v.(v); return; } public void logoutUserFromKeytab() throws java.io.IOException { javax.security.auth.login.LoginException v; oadd.org.apache.hadoop.security.User v; java.lang.String v, v, v, v, v, v; oadd.org.apache.hadoop.security.KerberosAuthException v, v; boolean v, v; oadd.org.apache.hadoop.security.UserGroupInformation v; org.slf4j.Logger v, v, v; oadd.org.apache.hadoop.security.UserGroupInformation$HadoopLoginContext v; v := @this: oadd.org.apache.hadoop.security.UserGroupInformation; v = virtualinvoke v.(); if v != 0 goto label; return; label: v = specialinvoke v.(); v = specialinvoke v.(); if v == null goto label; if v != null goto label; label: v = new oadd.org.apache.hadoop.security.KerberosAuthException; specialinvoke v.(java.lang.String)>("loginUserFromKeyTab must be done first"); throw v; label: v = ; v = interfaceinvoke v.(); if v == 0 goto label; v = ; v = virtualinvoke v.(); v = dynamicinvoke "makeConcatWithConstants" (v) ("Initiating logout for \u0001"); interfaceinvoke v.(v); label: virtualinvoke v.(); label: goto label; label: v := @caughtexception; v = new oadd.org.apache.hadoop.security.KerberosAuthException; specialinvoke v.(java.lang.String,java.lang.Throwable)>("Logout failure", v); v = v.; v = virtualinvoke v.(); virtualinvoke v.(v); virtualinvoke v.(v); throw v; label: v = ; v = virtualinvoke v.(); v = dynamicinvoke "makeConcatWithConstants" (v, v) ("Logout successful for user \u using keytab file \u0001"); interfaceinvoke v.(v); return; catch javax.security.auth.login.LoginException from label to label with label; } public void checkTGTAndReloginFromKeytab() throws java.io.IOException { oadd.org.apache.hadoop.security.UserGroupInformation v; v := @this: oadd.org.apache.hadoop.security.UserGroupInformation; specialinvoke v.(1); return; } void fixKerberosTicketOrder() { java.lang.Throwable v; java.lang.String v; boolean v, v, v, v; javax.security.auth.DestroyFailedException v; oadd.org.apache.hadoop.security.UserGroupInformation v; org.slf4j.Logger v, v, v, v; java.util.Iterator v; javax.security.auth.kerberos.KerberosPrincipal v, v, v; java.util.Set v; javax.security.auth.Subject v; java.lang.Object v; v := @this: oadd.org.apache.hadoop.security.UserGroupInformation; v = virtualinvoke v.(); v = virtualinvoke v.(); entermonitor v; label: v = interfaceinvoke v.(); label: v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); v = v instanceof javax.security.auth.kerberos.KerberosTicket; if v == 0 goto label; v = virtualinvoke v.(); if v != 0 goto label; v = virtualinvoke v.(); if v != null goto label; label: v = ; interfaceinvoke v.("Ticket is already destroyed, remove it."); interfaceinvoke v.(); goto label; label: v = virtualinvoke v.(); v = virtualinvoke v.(); v = virtualinvoke v.("krbtgt"); if v != 0 goto label; v = ; v = virtualinvoke v.(); interfaceinvoke v.("The first kerberos ticket is not TGT(the server principal is {}), remove and destroy it.", v); interfaceinvoke v.(); label: virtualinvoke v.(); label: goto label; label: v := @caughtexception; v = ; interfaceinvoke v.("destroy ticket failed", v); goto label; label: exitmonitor v; label: return; label: exitmonitor v; label: goto label; label: v := @caughtexception; exitmonitor v; throw v; label: v = ; interfaceinvoke v.("Warning, no kerberos ticket found while attempting to renew ticket"); return; catch javax.security.auth.DestroyFailedException from label to label with label; catch java.lang.Throwable from label to label with label; catch java.lang.Throwable from label to label with label; } public void reloginFromKeytab() throws java.io.IOException { oadd.org.apache.hadoop.security.UserGroupInformation v; v := @this: oadd.org.apache.hadoop.security.UserGroupInformation; specialinvoke v.(0); return; } public void forceReloginFromKeytab() throws java.io.IOException { oadd.org.apache.hadoop.security.UserGroupInformation v; v := @this: oadd.org.apache.hadoop.security.UserGroupInformation; specialinvoke v.(0, 1); return; } private void reloginFromKeytab(boolean) throws java.io.IOException { oadd.org.apache.hadoop.security.UserGroupInformation v; boolean v; v := @this: oadd.org.apache.hadoop.security.UserGroupInformation; v := @parameter: boolean; specialinvoke v.(v, 0); return; } private void reloginFromKeytab(boolean, boolean) throws java.io.IOException { oadd.org.apache.hadoop.security.UserGroupInformation v; long v, v; javax.security.auth.kerberos.KerberosTicket v; byte v; oadd.org.apache.hadoop.security.KerberosAuthException v; oadd.org.apache.hadoop.security.UserGroupInformation$HadoopLoginContext v; boolean v, v, v, v, v; v := @this: oadd.org.apache.hadoop.security.UserGroupInformation; v := @parameter: boolean; v := @parameter: boolean; v = virtualinvoke v.(); if v == 0 goto label; v = virtualinvoke v.(); if v != 0 goto label; label: return; label: v = specialinvoke v.(); if v != null goto label; v = new oadd.org.apache.hadoop.security.KerberosAuthException; specialinvoke v.(java.lang.String)>("loginUserFromKeyTab must be done first"); throw v; label: if v == 0 goto label; v = specialinvoke v.(); if v == null goto label; v = ; if v != 0 goto label; v = staticinvoke (); v = specialinvoke v.(v); v = v cmp v; if v >= 0 goto label; return; label: specialinvoke v.(v, v); return; } public void reloginFromTicketCache() throws java.io.IOException { oadd.org.apache.hadoop.security.UserGroupInformation v; oadd.org.apache.hadoop.security.KerberosAuthException v; oadd.org.apache.hadoop.security.UserGroupInformation$HadoopLoginContext v; boolean v, v; v := @this: oadd.org.apache.hadoop.security.UserGroupInformation; v = virtualinvoke v.(); if v == 0 goto label; v = specialinvoke v.(); if v != 0 goto label; label: return; label: v = specialinvoke v.(); if v != null goto label; v = new oadd.org.apache.hadoop.security.KerberosAuthException; specialinvoke v.(java.lang.String)>("login must be done first"); throw v; label: specialinvoke v.(v, 0); return; } private void relogin(oadd.org.apache.hadoop.security.UserGroupInformation$HadoopLoginContext, boolean) throws java.io.IOException { java.lang.Throwable v; oadd.org.apache.hadoop.security.UserGroupInformation v; java.lang.Object v; oadd.org.apache.hadoop.security.UserGroupInformation$HadoopLoginContext v, v; boolean v; v := @this: oadd.org.apache.hadoop.security.UserGroupInformation; v := @parameter: oadd.org.apache.hadoop.security.UserGroupInformation$HadoopLoginContext; v := @parameter: boolean; v = virtualinvoke v.(); entermonitor v; label: v = specialinvoke v.(); if v != v goto label; specialinvoke v.(v, v); label: exitmonitor v; label: goto label; label: v := @caughtexception; exitmonitor v; throw v; label: return; catch java.lang.Throwable from label to label with label; } private void unprotectedRelogin(oadd.org.apache.hadoop.security.UserGroupInformation$HadoopLoginContext, boolean) throws java.io.IOException { javax.security.auth.login.LoginException v; oadd.org.apache.hadoop.security.UserGroupInformation$HadoopConfiguration v; long v; java.lang.AssertionError v; oadd.org.apache.hadoop.security.User v; java.lang.String v, v, v, v, v, v; oadd.org.apache.hadoop.security.KerberosAuthException v; boolean v, v, v, v, v, v; oadd.org.apache.hadoop.security.UserGroupInformation v; org.slf4j.Logger v, v, v, v; javax.security.auth.Subject v; java.lang.Object v; oadd.org.apache.hadoop.security.UserGroupInformation$HadoopLoginContext v, v; v := @this: oadd.org.apache.hadoop.security.UserGroupInformation; v := @parameter: oadd.org.apache.hadoop.security.UserGroupInformation$HadoopLoginContext; v := @parameter: boolean; v = ; if v != 0 goto label; v = virtualinvoke v.(); v = staticinvoke (v); if v != 0 goto label; v = new java.lang.AssertionError; specialinvoke v.()>(); throw v; label: v = staticinvoke (); v = specialinvoke v.(v); if v != 0 goto label; if v != 0 goto label; return; label: v = v.; virtualinvoke v.(v); label: v = ; v = interfaceinvoke v.(); if v == 0 goto label; v = ; v = virtualinvoke v.(); v = dynamicinvoke "makeConcatWithConstants" (v) ("Initiating logout for \u0001"); interfaceinvoke v.(v); label: virtualinvoke v.(); v = virtualinvoke v.(); v = virtualinvoke v.(); v = virtualinvoke v.(); v = staticinvoke (v, v, v); v = ; v = interfaceinvoke v.(); if v == 0 goto label; v = ; v = virtualinvoke v.(); v = dynamicinvoke "makeConcatWithConstants" (v) ("Initiating re-login for \u0001"); interfaceinvoke v.(v); label: virtualinvoke v.(); virtualinvoke v.(); specialinvoke v.(v); label: goto label; label: v := @caughtexception; v = new oadd.org.apache.hadoop.security.KerberosAuthException; specialinvoke v.(java.lang.String,java.lang.Throwable)>("Login failure", v); v = virtualinvoke v.(); virtualinvoke v.(v); throw v; label: return; catch javax.security.auth.login.LoginException from label to label with label; } public static oadd.org.apache.hadoop.security.UserGroupInformation loginUserFromKeytabAndReturnUGI(java.lang.String, java.lang.String) throws java.io.IOException { oadd.org.apache.hadoop.security.UserGroupInformation v, v; oadd.org.apache.hadoop.security.UserGroupInformation$LoginParam v, v; oadd.org.apache.hadoop.security.UserGroupInformation$LoginParams v; java.lang.String v, v; boolean v; v := @parameter: java.lang.String; v := @parameter: java.lang.String; v = staticinvoke (); if v != 0 goto label; v = staticinvoke (); return v; label: v = new oadd.org.apache.hadoop.security.UserGroupInformation$LoginParams; specialinvoke v.()>(); v = ; virtualinvoke v.(v, v); v = ; virtualinvoke v.(v, v); v = staticinvoke (null, v); return v; } private boolean hasSufficientTimeElapsed(long) { oadd.org.apache.hadoop.security.UserGroupInformation v; org.slf4j.Logger v; long v, v, v, v, v, v, v; byte v; oadd.org.apache.hadoop.security.User v, v; java.lang.String v; boolean v; v := @this: oadd.org.apache.hadoop.security.UserGroupInformation; v := @parameter: long; v = ; if v != 0 goto label; v = v.; v = virtualinvoke v.(); v = v - v; v = ; v = v cmp v; if v >= 0 goto label; v = ; v = ; v = v / 1000L; v = v.; v = virtualinvoke v.(); v = dynamicinvoke "makeConcatWithConstants" (v, v) ("Not attempting to re-login since the last re-login was attempted less than \u seconds before. Last Login=\u0001"); interfaceinvoke v.(v); return 0; label: return 1; } public static boolean isLoginKeytabBased() throws java.io.IOException { oadd.org.apache.hadoop.security.UserGroupInformation v; boolean v; v = staticinvoke (); v = virtualinvoke v.(); return v; } public static boolean isLoginTicketBased() throws java.io.IOException { oadd.org.apache.hadoop.security.UserGroupInformation v; boolean v; v = staticinvoke (); v = specialinvoke v.(); return v; } public static oadd.org.apache.hadoop.security.UserGroupInformation createRemoteUser(java.lang.String) { java.lang.String v; oadd.org.apache.hadoop.security.UserGroupInformation v; oadd.org.apache.hadoop.security.SaslRpcServer$AuthMethod v; v := @parameter: java.lang.String; v = ; v = staticinvoke (v, v); return v; } public static oadd.org.apache.hadoop.security.UserGroupInformation createRemoteUser(java.lang.String, oadd.org.apache.hadoop.security.SaslRpcServer$AuthMethod) { oadd.org.apache.hadoop.security.UserGroupInformation v; oadd.org.apache.hadoop.security.SaslRpcServer$AuthMethod v; java.util.Set v; java.lang.IllegalArgumentException v; javax.security.auth.Subject v; oadd.org.apache.hadoop.security.User v; java.lang.String v; boolean v; v := @parameter: java.lang.String; v := @parameter: oadd.org.apache.hadoop.security.SaslRpcServer$AuthMethod; if v == null goto label; v = virtualinvoke v.(); if v == 0 goto label; label: v = new java.lang.IllegalArgumentException; specialinvoke v.(java.lang.String)>("Null user"); throw v; label: v = new javax.security.auth.Subject; specialinvoke v.()>(); v = virtualinvoke v.(); v = new oadd.org.apache.hadoop.security.User; specialinvoke v.(java.lang.String)>(v); interfaceinvoke v.(v); v = new oadd.org.apache.hadoop.security.UserGroupInformation; specialinvoke v.(javax.security.auth.Subject)>(v); virtualinvoke v.(v); return v; } public static oadd.org.apache.hadoop.security.UserGroupInformation createProxyUser(java.lang.String, oadd.org.apache.hadoop.security.UserGroupInformation) { oadd.org.apache.hadoop.security.UserGroupInformation v, v; java.util.Set v; oadd.org.apache.hadoop.security.UserGroupInformation$AuthenticationMethod v; java.lang.IllegalArgumentException v, v; javax.security.auth.Subject v; oadd.org.apache.hadoop.security.UserGroupInformation$RealUser v; oadd.org.apache.hadoop.security.User v; java.lang.String v; boolean v; v := @parameter: java.lang.String; v := @parameter: oadd.org.apache.hadoop.security.UserGroupInformation; if v == null goto label; v = virtualinvoke v.(); if v == 0 goto label; label: v = new java.lang.IllegalArgumentException; specialinvoke v.(java.lang.String)>("Null user"); throw v; label: if v != null goto label; v = new java.lang.IllegalArgumentException; specialinvoke v.(java.lang.String)>("Null real user"); throw v; label: v = new javax.security.auth.Subject; specialinvoke v.()>(); v = virtualinvoke v.(); v = new oadd.org.apache.hadoop.security.User; v = ; specialinvoke v.(java.lang.String,oadd.org.apache.hadoop.security.UserGroupInformation$AuthenticationMethod,javax.security.auth.login.LoginContext)>(v, v, null); interfaceinvoke v.(v); v = new oadd.org.apache.hadoop.security.UserGroupInformation$RealUser; specialinvoke v.(oadd.org.apache.hadoop.security.UserGroupInformation)>(v); interfaceinvoke v.(v); v = new oadd.org.apache.hadoop.security.UserGroupInformation; specialinvoke v.(javax.security.auth.Subject)>(v); return v; } public oadd.org.apache.hadoop.security.UserGroupInformation getRealUser() { oadd.org.apache.hadoop.security.UserGroupInformation v, v; java.util.Iterator v; java.util.Set v; java.lang.Object v; javax.security.auth.Subject v; boolean v; v := @this: oadd.org.apache.hadoop.security.UserGroupInformation; v = v.; v = virtualinvoke v.(class "Loadd/org/apache/hadoop/security/UserGroupInformation$RealUser;"); v = interfaceinvoke v.(); v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); v = virtualinvoke v.(); return v; label: return null; } public static oadd.org.apache.hadoop.security.UserGroupInformation createUserForTesting(java.lang.String, java.lang.String[]) { oadd.org.apache.hadoop.security.Groups v, v, v; oadd.org.apache.hadoop.security.UserGroupInformation v; java.lang.String[] v; oadd.org.apache.hadoop.security.UserGroupInformation$TestingGroups v; java.lang.String v, v; boolean v; v := @parameter: java.lang.String; v := @parameter: java.lang.String[]; staticinvoke (); v = staticinvoke (v); v = ; v = v instanceof oadd.org.apache.hadoop.security.UserGroupInformation$TestingGroups; if v != 0 goto label; v = new oadd.org.apache.hadoop.security.UserGroupInformation$TestingGroups; v = ; specialinvoke v.(oadd.org.apache.hadoop.security.Groups)>(v); = v; label: v = ; v = virtualinvoke v.(); specialinvoke v.(v, v); return v; } public static oadd.org.apache.hadoop.security.UserGroupInformation createProxyUserForTesting(java.lang.String, oadd.org.apache.hadoop.security.UserGroupInformation, java.lang.String[]) { oadd.org.apache.hadoop.security.Groups v, v, v; oadd.org.apache.hadoop.security.UserGroupInformation v, v; java.lang.String[] v; oadd.org.apache.hadoop.security.UserGroupInformation$TestingGroups v; java.lang.String v, v; boolean v; v := @parameter: java.lang.String; v := @parameter: oadd.org.apache.hadoop.security.UserGroupInformation; v := @parameter: java.lang.String[]; staticinvoke (); v = staticinvoke (v, v); v = ; v = v instanceof oadd.org.apache.hadoop.security.UserGroupInformation$TestingGroups; if v != 0 goto label; v = new oadd.org.apache.hadoop.security.UserGroupInformation$TestingGroups; v = ; specialinvoke v.(oadd.org.apache.hadoop.security.Groups)>(v); = v; label: v = ; v = virtualinvoke v.(); specialinvoke v.(v, v); return v; } public java.lang.String getShortUserName() { oadd.org.apache.hadoop.security.User v; java.lang.String v; oadd.org.apache.hadoop.security.UserGroupInformation v; v := @this: oadd.org.apache.hadoop.security.UserGroupInformation; v = v.; v = virtualinvoke v.(); return v; } public java.lang.String getPrimaryGroupName() throws java.io.IOException { java.util.List v; oadd.org.apache.hadoop.security.UserGroupInformation v; java.io.IOException v; java.lang.Object v; java.lang.String v; boolean v; v := @this: oadd.org.apache.hadoop.security.UserGroupInformation; v = virtualinvoke v.(); v = interfaceinvoke v.(); if v == 0 goto label; v = new java.io.IOException; v = dynamicinvoke "makeConcatWithConstants" (v) ("There is no primary group for UGI \u0001"); specialinvoke v.(java.lang.String)>(v); throw v; label: v = interfaceinvoke v.(0); return v; } public java.lang.String getUserName() { oadd.org.apache.hadoop.security.User v; java.lang.String v; oadd.org.apache.hadoop.security.UserGroupInformation v; v := @this: oadd.org.apache.hadoop.security.UserGroupInformation; v = v.; v = virtualinvoke v.(); return v; } public synchronized boolean addTokenIdentifier(oadd.org.apache.hadoop.security.token.TokenIdentifier) { oadd.org.apache.hadoop.security.token.TokenIdentifier v; oadd.org.apache.hadoop.security.UserGroupInformation v; java.util.Set v; javax.security.auth.Subject v; boolean v; v := @this: oadd.org.apache.hadoop.security.UserGroupInformation; v := @parameter: oadd.org.apache.hadoop.security.token.TokenIdentifier; v = v.; v = virtualinvoke v.(); v = interfaceinvoke v.(v); return v; } public synchronized java.util.Set getTokenIdentifiers() { java.util.Set v; oadd.org.apache.hadoop.security.UserGroupInformation v; javax.security.auth.Subject v; v := @this: oadd.org.apache.hadoop.security.UserGroupInformation; v = v.