public class oadd.org.apache.calcite.avatica.remote.KerberosConnection extends java.lang.Object
{
private static final org.slf4j.Logger LOG;
private static final java.lang.String IBM_KRB5_LOGIN_MODULE;
private static final java.lang.String SUN_KRB5_LOGIN_MODULE;
private static final java.lang.String JAAS_CONF_NAME;
private static final java.lang.String RENEWAL_THREAD_NAME;
private static final java.lang.String JAVA_VENDOR_NAME;
private static final boolean IS_IBM_JAVA;
public static final float PERCENT_OF_LIFETIME_TO_RENEW;
public static final long RENEWAL_PERIOD;
private final java.lang.String principal;
private final javax.security.auth.login.Configuration jaasConf;
private javax.security.auth.Subject subject;
private oadd.org.apache.calcite.avatica.remote.KerberosConnection$RenewalTask renewalTask;
private java.lang.Thread renewalThread;
public void <init>(java.lang.String, java.io.File)
{
java.lang.Object v, v;
java.lang.String v, v;
oadd.org.apache.calcite.avatica.remote.ClientKeytabJaasConf v;
java.io.File v;
oadd.org.apache.calcite.avatica.remote.KerberosConnection v;
v := @this: oadd.org.apache.calcite.avatica.remote.KerberosConnection;
v := @parameter: java.lang.String;
v := @parameter: java.io.File;
specialinvoke v.<java.lang.Object: void <init>()>();
v = staticinvoke <java.util.Objects: java.lang.Object requireNonNull(java.lang.Object)>(v);
v.<oadd.org.apache.calcite.avatica.remote.KerberosConnection: java.lang.String principal> = v;
v = new oadd.org.apache.calcite.avatica.remote.ClientKeytabJaasConf;
v = staticinvoke <java.util.Objects: java.lang.Object requireNonNull(java.lang.Object)>(v);
v = virtualinvoke v.<java.io.File: java.lang.String getAbsolutePath()>();
specialinvoke v.<oadd.org.apache.calcite.avatica.remote.ClientKeytabJaasConf: void <init>(java.lang.String,java.lang.String)>(v, v);
v.<oadd.org.apache.calcite.avatica.remote.KerberosConnection: javax.security.auth.login.Configuration jaasConf> = v;
return;
}
public synchronized javax.security.auth.Subject getSubject()
{
javax.security.auth.Subject v;
oadd.org.apache.calcite.avatica.remote.KerberosConnection v;
v := @this: oadd.org.apache.calcite.avatica.remote.KerberosConnection;
v = v.<oadd.org.apache.calcite.avatica.remote.KerberosConnection: javax.security.auth.Subject subject>;
return v;
}
public synchronized void login()
{
java.util.Map$Entry v, v;
javax.security.auth.Subject v;
oadd.org.apache.calcite.avatica.remote.KerberosConnection v;
java.lang.Thread v;
java.lang.Object v, v, v, v;
v := @this: oadd.org.apache.calcite.avatica.remote.KerberosConnection;
v = virtualinvoke v.<oadd.org.apache.calcite.avatica.remote.KerberosConnection: java.util.Map$Entry performKerberosLogin()>();
v = interfaceinvoke v.<java.util.Map$Entry: java.lang.Object getValue()>();
v.<oadd.org.apache.calcite.avatica.remote.KerberosConnection: javax.security.auth.Subject subject> = v;
v = interfaceinvoke v.<java.util.Map$Entry: java.lang.Object getKey()>();
v = v.<oadd.org.apache.calcite.avatica.remote.KerberosConnection: javax.security.auth.Subject subject>;
v = virtualinvoke v.<oadd.org.apache.calcite.avatica.remote.KerberosConnection: java.util.Map$Entry createRenewalThread(javax.security.auth.login.LoginContext,javax.security.auth.Subject,long)>(v, v, 30L);
v = interfaceinvoke v.<java.util.Map$Entry: java.lang.Object getKey()>();
v.<oadd.org.apache.calcite.avatica.remote.KerberosConnection: oadd.org.apache.calcite.avatica.remote.KerberosConnection$RenewalTask renewalTask> = v;
v = interfaceinvoke v.<java.util.Map$Entry: java.lang.Object getValue()>();
v.<oadd.org.apache.calcite.avatica.remote.KerberosConnection: java.lang.Thread renewalThread> = v;
v = v.<oadd.org.apache.calcite.avatica.remote.KerberosConnection: java.lang.Thread renewalThread>;
virtualinvoke v.<java.lang.Thread: void start()>();
return;
}
java.util.Map$Entry performKerberosLogin()
{
java.util.Map$Entry v;
javax.security.auth.kerberos.KerberosPrincipal v;
java.lang.RuntimeException v;
java.lang.Exception v;
javax.security.auth.Subject v;
oadd.org.apache.calcite.avatica.remote.KerberosConnection v;
java.util.HashSet v, v, v;
java.lang.String v;
javax.security.auth.login.Configuration v;
v := @this: oadd.org.apache.calcite.avatica.remote.KerberosConnection;
v = new java.util.HashSet;
specialinvoke v.<java.util.HashSet: void <init>()>();
v = new javax.security.auth.kerberos.KerberosPrincipal;
v = v.<oadd.org.apache.calcite.avatica.remote.KerberosConnection: java.lang.String principal>;
specialinvoke v.<javax.security.auth.kerberos.KerberosPrincipal: void <init>(java.lang.String)>(v);
interfaceinvoke v.<java.util.Set: boolean add(java.lang.Object)>(v);
v = new javax.security.auth.Subject;
v = new java.util.HashSet;
specialinvoke v.<java.util.HashSet: void <init>()>();
v = new java.util.HashSet;
specialinvoke v.<java.util.HashSet: void <init>()>();
specialinvoke v.<javax.security.auth.Subject: void <init>(boolean,java.util.Set,java.util.Set,java.util.Set)>(0, v, v, v);
label:
v = v.<oadd.org.apache.calcite.avatica.remote.KerberosConnection: javax.security.auth.login.Configuration jaasConf>;
v = virtualinvoke v.<oadd.org.apache.calcite.avatica.remote.KerberosConnection: java.util.Map$Entry login(javax.security.auth.login.LoginContext,javax.security.auth.login.Configuration,javax.security.auth.Subject)>(null, v, v);
label:
return v;
label:
v := @caughtexception;
v = new java.lang.RuntimeException;
specialinvoke v.<java.lang.RuntimeException: void <init>(java.lang.String)>("Failed to perform Kerberos login");
throw v;
catch java.lang.Exception from label to label with label;
}
java.util.Map$Entry login(javax.security.auth.login.LoginContext, javax.security.auth.login.Configuration, javax.security.auth.Subject) throws javax.security.auth.login.LoginException
{
java.lang.RuntimeException v;
javax.security.auth.Subject v, v;
javax.security.auth.login.LoginContext v, v;
oadd.org.apache.calcite.avatica.remote.KerberosConnection v;
java.util.AbstractMap$SimpleEntry v;
javax.security.auth.login.Configuration v;
v := @this: oadd.org.apache.calcite.avatica.remote.KerberosConnection;
v := @parameter: javax.security.auth.login.LoginContext;
v := @parameter: javax.security.auth.login.Configuration;
v := @parameter: javax.security.auth.Subject;
if null == v goto label;
virtualinvoke v.<javax.security.auth.login.LoginContext: void logout()>();
label:
v = virtualinvoke v.<oadd.org.apache.calcite.avatica.remote.KerberosConnection: javax.security.auth.login.LoginContext createLoginContext(javax.security.auth.login.Configuration)>(v);
virtualinvoke v.<javax.security.auth.login.LoginContext: void login()>();
v = virtualinvoke v.<javax.security.auth.login.LoginContext: javax.security.auth.Subject getSubject()>();
if null != v goto label;
v = new java.lang.RuntimeException;
specialinvoke v.<java.lang.RuntimeException: void <init>(java.lang.String)>("Failed to perform Kerberos login");
throw v;
label:
v = new java.util.AbstractMap$SimpleEntry;
specialinvoke v.<java.util.AbstractMap$SimpleEntry: void <init>(java.lang.Object,java.lang.Object)>(v, v);
return v;
}
javax.security.auth.login.LoginContext createLoginContext(javax.security.auth.login.Configuration) throws javax.security.auth.login.LoginException
{
javax.security.auth.login.Configuration v;
javax.security.auth.Subject v;
javax.security.auth.login.LoginContext v;
oadd.org.apache.calcite.avatica.remote.KerberosConnection v;
v := @this: oadd.org.apache.calcite.avatica.remote.KerberosConnection;
v := @parameter: javax.security.auth.login.Configuration;
v = new javax.security.auth.login.LoginContext;
v = v.<oadd.org.apache.calcite.avatica.remote.KerberosConnection: javax.security.auth.Subject subject>;
specialinvoke v.<javax.security.auth.login.LoginContext: void <init>(java.lang.String,javax.security.auth.Subject,javax.security.auth.callback.CallbackHandler,javax.security.auth.login.Configuration)>("AvaticaKeytabConf", v, null, v);
return v;
}
java.util.Map$Entry createRenewalThread(javax.security.auth.login.LoginContext, javax.security.auth.Subject, long)
{
oadd.org.apache.calcite.avatica.remote.KerberosConnection$1 v;
long v;
javax.security.auth.Subject v;
javax.security.auth.login.LoginContext v;
oadd.org.apache.calcite.avatica.remote.KerberosConnection v;
java.lang.Thread v;
java.util.AbstractMap$SimpleEntry v;
oadd.org.apache.calcite.avatica.remote.KerberosConnection$RenewalTask v;
javax.security.auth.login.Configuration v;
v := @this: oadd.org.apache.calcite.avatica.remote.KerberosConnection;
v := @parameter: javax.security.auth.login.LoginContext;
v := @parameter: javax.security.auth.Subject;
v := @parameter: long;
v = new oadd.org.apache.calcite.avatica.remote.KerberosConnection$RenewalTask;
v = v.<oadd.org.apache.calcite.avatica.remote.KerberosConnection: javax.security.auth.login.Configuration jaasConf>;
specialinvoke v.<oadd.org.apache.calcite.avatica.remote.KerberosConnection$RenewalTask: void <init>(oadd.org.apache.calcite.avatica.remote.KerberosConnection,javax.security.auth.login.LoginContext,javax.security.auth.Subject,javax.security.auth.login.Configuration,long)>(v, v, v, v, v);
v = new java.lang.Thread;
specialinvoke v.<java.lang.Thread: void <init>(java.lang.Runnable)>(v);
virtualinvoke v.<java.lang.Thread: void setDaemon(boolean)>(1);
v = new oadd.org.apache.calcite.avatica.remote.KerberosConnection$1;
specialinvoke v.<oadd.org.apache.calcite.avatica.remote.KerberosConnection$1: void <init>(oadd.org.apache.calcite.avatica.remote.KerberosConnection)>(v);
virtualinvoke v.<java.lang.Thread: void setUncaughtExceptionHandler(java.lang.Thread$UncaughtExceptionHandler)>(v);
virtualinvoke v.<java.lang.Thread: void setName(java.lang.String)>("Avatica Kerberos Renewal Thread");
v = new java.util.AbstractMap$SimpleEntry;
specialinvoke v.<java.util.AbstractMap$SimpleEntry: void <init>(java.lang.Object,java.lang.Object)>(v, v);
return v;
}
public void stopRenewalThread()
{
long v, v;
byte v;
java.lang.Thread v, v, v, v, v, v, v, v;
oadd.org.apache.calcite.avatica.remote.KerberosConnection$RenewalTask v, v;
boolean v, v, v;
org.slf4j.Logger v, v, v, v;
oadd.org.apache.calcite.avatica.remote.KerberosConnection v;
java.lang.InterruptedException v, v;
v := @this: oadd.org.apache.calcite.avatica.remote.KerberosConnection;
v = v.<oadd.org.apache.calcite.avatica.remote.KerberosConnection: oadd.org.apache.calcite.avatica.remote.KerberosConnection$RenewalTask renewalTask>;
if null == v goto label;
v = v.<oadd.org.apache.calcite.avatica.remote.KerberosConnection: java.lang.Thread renewalThread>;
if null == v goto label;
v = <oadd.org.apache.calcite.avatica.remote.KerberosConnection: org.slf4j.Logger LOG>;
interfaceinvoke v.<org.slf4j.Logger: void debug(java.lang.String)>("Informing RenewalTask to gracefully stop and interrupting the renewal thread.");
v = v.<oadd.org.apache.calcite.avatica.remote.KerberosConnection: oadd.org.apache.calcite.avatica.remote.KerberosConnection$RenewalTask renewalTask>;
virtualinvoke v.<oadd.org.apache.calcite.avatica.remote.KerberosConnection$RenewalTask: void asyncStop()>();
v = staticinvoke <java.lang.System: long currentTimeMillis()>();
v = v + 5000L;
label:
v = v cmp v;
if v >= 0 goto label;
v = v.<oadd.org.apache.calcite.avatica.remote.KerberosConnection: java.lang.Thread renewalThread>;
v = virtualinvoke v.<java.lang.Thread: boolean isAlive()>();
if v == 0 goto label;
label:
staticinvoke <java.lang.Thread: void sleep(long)>(500L);
label:
goto label;
label:
v := @caughtexception;
v = staticinvoke <java.lang.Thread: java.lang.Thread currentThread()>();
virtualinvoke v.<java.lang.Thread: void interrupt()>();
return;
label:
v = staticinvoke <java.lang.System: long currentTimeMillis()>();
goto label;
label:
v = v.<oadd.org.apache.calcite.avatica.remote.KerberosConnection: java.lang.Thread renewalThread>;
v = virtualinvoke v.<java.lang.Thread: boolean isAlive()>();
if v == 0 goto label;
v = <oadd.org.apache.calcite.avatica.remote.KerberosConnection: org.slf4j.Logger LOG>;
interfaceinvoke v.<org.slf4j.Logger: void warn(java.lang.String)>("Renewal thread failed to gracefully stop, interrupting it");
v = v.<oadd.org.apache.calcite.avatica.remote.KerberosConnection: java.lang.Thread renewalThread>;
virtualinvoke v.<java.lang.Thread: void interrupt()>();
label:
v = v.<oadd.org.apache.calcite.avatica.remote.KerberosConnection: java.lang.Thread renewalThread>;
virtualinvoke v.<java.lang.Thread: void join(long)>(5000L);
label:
goto label;
label:
v := @caughtexception;
v = staticinvoke <java.lang.Thread: java.lang.Thread currentThread()>();
virtualinvoke v.<java.lang.Thread: void interrupt()>();
label:
v = v.<oadd.org.apache.calcite.avatica.remote.KerberosConnection: java.lang.Thread renewalThread>;
v = virtualinvoke v.<java.lang.Thread: boolean isAlive()>();
if v == 0 goto label;
v = <oadd.org.apache.calcite.avatica.remote.KerberosConnection: org.slf4j.Logger LOG>;
interfaceinvoke v.<org.slf4j.Logger: void warn(java.lang.String)>("Renewal thread failed to gracefully and ungracefully stop, proceeding.");
label:
v.<oadd.org.apache.calcite.avatica.remote.KerberosConnection: oadd.org.apache.calcite.avatica.remote.KerberosConnection$RenewalTask renewalTask> = null;
v.<oadd.org.apache.calcite.avatica.remote.KerberosConnection: java.lang.Thread renewalThread> = null;
goto label;
label:
v = <oadd.org.apache.calcite.avatica.remote.KerberosConnection: org.slf4j.Logger LOG>;
interfaceinvoke v.<org.slf4j.Logger: void warn(java.lang.String)>("Renewal thread was never started or already stopped.");
label:
return;
catch java.lang.InterruptedException from label to label with label;
catch java.lang.InterruptedException from label to label with label;
}
static boolean isTGSPrincipal(javax.security.auth.kerberos.KerberosPrincipal)
{
javax.security.auth.kerberos.KerberosPrincipal v;
java.lang.String v, v, v, v;
boolean v;
v := @parameter: javax.security.auth.kerberos.KerberosPrincipal;
if v != null goto label;
return 0;
label:
v = virtualinvoke v.<javax.security.auth.kerberos.KerberosPrincipal: java.lang.String getName()>();
v = virtualinvoke v.<javax.security.auth.kerberos.KerberosPrincipal: java.lang.String getRealm()>();
v = virtualinvoke v.<javax.security.auth.kerberos.KerberosPrincipal: java.lang.String getRealm()>();
v = dynamicinvoke "makeConcatWithConstants" <java.lang.String (java.lang.String,java.lang.String)>(v, v) <java.lang.invoke.StringConcatFactory: java.lang.invoke.CallSite makeConcatWithConstants(java.lang.invoke.MethodHandles$Lookup,java.lang.String,java.lang.invoke.MethodType,java.lang.String,java.lang.Object[])>("krbtgt/\u0001@\u0001");
v = virtualinvoke v.<java.lang.String: boolean equals(java.lang.Object)>(v);
if v == 0 goto label;
return 1;
label:
return 0;
}
public static boolean isIbmJava()
{
boolean v;
v = <oadd.org.apache.calcite.avatica.remote.KerberosConnection: boolean IS_IBM_JAVA>;
return v;
}
public static java.lang.String getKrb5LoginModuleName()
{
java.lang.String v, v;
boolean v;
v = staticinvoke <java.lang.System: java.lang.String getProperty(java.lang.String)>("java.vendor");
v = virtualinvoke v.<java.lang.String: boolean contains(java.lang.CharSequence)>("IBM");
if v == 0 goto label;
v = "com.ibm.security.auth.module.Krb5LoginModule";
goto label;
label:
v = "com.sun.security.auth.module.Krb5LoginModule";
label:
return v;
}
static void <clinit>()
{
org.slf4j.Logger v;
java.lang.String v, v;
boolean v;
v = staticinvoke <org.slf4j.LoggerFactory: org.slf4j.Logger getLogger(java.lang.Class)>(class "Loadd/org/apache/calcite/avatica/remote/KerberosConnection;");
<oadd.org.apache.calcite.avatica.remote.KerberosConnection: org.slf4j.Logger LOG> = v;
v = staticinvoke <java.lang.System: java.lang.String getProperty(java.lang.String)>("java.vendor");
<oadd.org.apache.calcite.avatica.remote.KerberosConnection: java.lang.String JAVA_VENDOR_NAME> = v;
v = <oadd.org.apache.calcite.avatica.remote.KerberosConnection: java.lang.String JAVA_VENDOR_NAME>;
v = virtualinvoke v.<java.lang.String: boolean contains(java.lang.CharSequence)>("IBM");
<oadd.org.apache.calcite.avatica.remote.KerberosConnection: boolean IS_IBM_JAVA> = v;
return;
}
}