public class org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner extends java.lang.Object implements org.apache.zookeeper.server.quorum.auth.QuorumAuthLearner
{
private static final org.slf4j.Logger LOG;
private final org.apache.zookeeper.Login learnerLogin;
private final boolean quorumRequireSasl;
private final java.lang.String quorumServicePrincipal;
public void <init>(boolean, java.lang.String, java.lang.String) throws javax.security.sasl.SaslException
{
javax.security.auth.login.LoginException v, v;
java.lang.Object[] v;
javax.security.sasl.SaslException v;
org.apache.zookeeper.Login v, v;
int v;
java.lang.String v, v, v;
org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner v;
javax.security.auth.login.Configuration v;
boolean v;
org.apache.zookeeper.SaslClientCallbackHandler v;
org.apache.zookeeper.common.ZKConfig v;
javax.security.auth.login.AppConfigurationEntry[] v;
v := @this: org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner;
v := @parameter: boolean;
v := @parameter: java.lang.String;
v := @parameter: java.lang.String;
specialinvoke v.<java.lang.Object: void <init>()>();
v.<org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner: boolean quorumRequireSasl> = v;
v.<org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner: java.lang.String quorumServicePrincipal> = v;
label:
v = staticinvoke <javax.security.auth.login.Configuration: javax.security.auth.login.Configuration getConfiguration()>();
v = virtualinvoke v.<javax.security.auth.login.Configuration: javax.security.auth.login.AppConfigurationEntry[] getAppConfigurationEntry(java.lang.String)>(v);
if v == null goto label;
v = lengthof v;
if v != 0 goto label;
label:
v = new javax.security.auth.login.LoginException;
v = newarray (java.lang.Object)[1];
v[0] = v;
v = staticinvoke <java.lang.String: java.lang.String format(java.lang.String,java.lang.Object[])>("SASL-authentication failed because the specified JAAS configuration section \'%s\' could not be found.", v);
specialinvoke v.<javax.security.auth.login.LoginException: void <init>(java.lang.String)>(v);
throw v;
label:
v = new org.apache.zookeeper.Login;
v = new org.apache.zookeeper.SaslClientCallbackHandler;
specialinvoke v.<org.apache.zookeeper.SaslClientCallbackHandler: void <init>(java.lang.String,java.lang.String)>(null, "QuorumLearner");
v = new org.apache.zookeeper.common.ZKConfig;
specialinvoke v.<org.apache.zookeeper.common.ZKConfig: void <init>()>();
specialinvoke v.<org.apache.zookeeper.Login: void <init>(java.lang.String,javax.security.auth.callback.CallbackHandler,org.apache.zookeeper.common.ZKConfig)>(v, v, v);
v.<org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner: org.apache.zookeeper.Login learnerLogin> = v;
v = v.<org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner: org.apache.zookeeper.Login learnerLogin>;
virtualinvoke v.<org.apache.zookeeper.Login: void startThreadIfNeeded()>();
label:
goto label;
label:
v := @caughtexception;
v = new javax.security.sasl.SaslException;
specialinvoke v.<javax.security.sasl.SaslException: void <init>(java.lang.String,java.lang.Throwable)>("Failed to initialize authentication mechanism using SASL", v);
throw v;
label:
return;
catch javax.security.auth.login.LoginException from label to label with label;
}
public void authenticate(java.net.Socket, java.lang.String) throws java.io.IOException
{
byte[] v, v, v, v, v, v;
java.net.SocketAddress v, v;
javax.security.sasl.SaslException v, v, v, v, v;
org.apache.zookeeper.Login v, v, v, v;
javax.security.sasl.SaslClient v;
java.io.DataOutputStream v;
int[] v;
boolean v, v, v, v;
org.apache.zookeeper.server.quorum.auth.QuorumAuth$Status v;
java.lang.Throwable v;
java.io.DataInputStream v;
java.net.Socket v;
int v, v, v, v;
java.lang.Boolean v;
java.lang.String v, v, v, v, v;
org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner v;
java.io.OutputStream v;
org.slf4j.Logger v, v, v, v, v;
org.apache.zookeeper.server.quorum.QuorumAuthPacket v;
javax.security.auth.Subject v;
java.io.InputStream v;
v := @this: org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner;
v := @parameter: java.net.Socket;
v := @parameter: java.lang.String;
v = v.<org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner: boolean quorumRequireSasl>;
if v != 0 goto label;
v = <org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner: org.slf4j.Logger LOG>;
v = v.<org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner: boolean quorumRequireSasl>;
v = staticinvoke <java.lang.Boolean: java.lang.Boolean valueOf(boolean)>(v);
interfaceinvoke v.<org.slf4j.Logger: void info(java.lang.String,java.lang.Object,java.lang.Object)>("Skipping SASL authentication as {}={}", "quorum.auth.learnerRequireSasl", v);
return;
label:
v = null;
v = v.<org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner: java.lang.String quorumServicePrincipal>;
v = staticinvoke <org.apache.zookeeper.util.SecurityUtils: java.lang.String getServerPrincipal(java.lang.String,java.lang.String)>(v, v);
label:
v = new java.io.DataOutputStream;
v = virtualinvoke v.<java.net.Socket: java.io.OutputStream getOutputStream()>();
specialinvoke v.<java.io.DataOutputStream: void <init>(java.io.OutputStream)>(v);
v = new java.io.DataInputStream;
v = virtualinvoke v.<java.net.Socket: java.io.InputStream getInputStream()>();
specialinvoke v.<java.io.DataInputStream: void <init>(java.io.InputStream)>(v);
v = newarray (byte)[0];
v = v.<org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner: org.apache.zookeeper.Login learnerLogin>;
v = virtualinvoke v.<org.apache.zookeeper.Login: javax.security.auth.Subject getSubject()>();
v = <org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner: org.slf4j.Logger LOG>;
v = staticinvoke <org.apache.zookeeper.util.SecurityUtils: javax.security.sasl.SaslClient createSaslClient(javax.security.auth.Subject,java.lang.String,java.lang.String,java.lang.String,org.slf4j.Logger,java.lang.String)>(v, v, "zookeeper-quorum", "zk-quorum-sasl-md5", v, "QuorumLearner");
v = interfaceinvoke v.<javax.security.sasl.SaslClient: boolean hasInitialResponse()>();
if v == 0 goto label;
v = newarray (byte)[0];
v = v.<org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner: org.apache.zookeeper.Login learnerLogin>;
v = specialinvoke v.<org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner: byte[] createSaslToken(byte[],javax.security.sasl.SaslClient,org.apache.zookeeper.Login)>(v, v, v);
label:
specialinvoke v.<org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner: void send(java.io.DataOutputStream,byte[])>(v, v);
v = specialinvoke v.<org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner: org.apache.zookeeper.server.quorum.QuorumAuthPacket receive(java.io.DataInputStream)>(v);
v = virtualinvoke v.<org.apache.zookeeper.server.quorum.QuorumAuthPacket: int getStatus()>();
v = staticinvoke <org.apache.zookeeper.server.quorum.auth.QuorumAuth$Status: org.apache.zookeeper.server.quorum.auth.QuorumAuth$Status getStatus(int)>(v);
label:
v = interfaceinvoke v.<javax.security.sasl.SaslClient: boolean isComplete()>();
if v != 0 goto label;
v = <org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner$2: int[] $SwitchMap$org$apache$zookeeper$server$quorum$auth$QuorumAuth$Status>;
v = virtualinvoke v.<org.apache.zookeeper.server.quorum.auth.QuorumAuth$Status: int ordinal()>();
v = v[v];
tableswitch(v)
{
case 1: goto label;
case 2: goto label;
case 3: goto label;
default: goto label;
};
label:
v = virtualinvoke v.<org.apache.zookeeper.server.quorum.QuorumAuthPacket: byte[] getToken()>();
v = v.<org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner: org.apache.zookeeper.Login learnerLogin>;
v = specialinvoke v.<org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner: byte[] createSaslToken(byte[],javax.security.sasl.SaslClient,org.apache.zookeeper.Login)>(v, v, v);
if v == null goto label;
v = new javax.security.sasl.SaslException;
specialinvoke v.<javax.security.sasl.SaslException: void <init>(java.lang.String)>("Protocol error: attempting to send response after completion");
throw v;
label:
v = virtualinvoke v.<org.apache.zookeeper.server.quorum.QuorumAuthPacket: byte[] getToken()>();
v = v.<org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner: org.apache.zookeeper.Login learnerLogin>;
v = specialinvoke v.<org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner: byte[] createSaslToken(byte[],javax.security.sasl.SaslClient,org.apache.zookeeper.Login)>(v, v, v);
specialinvoke v.<org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner: void send(java.io.DataOutputStream,byte[])>(v, v);
v = specialinvoke v.<org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner: org.apache.zookeeper.server.quorum.QuorumAuthPacket receive(java.io.DataInputStream)>(v);
v = virtualinvoke v.<org.apache.zookeeper.server.quorum.QuorumAuthPacket: int getStatus()>();
v = staticinvoke <org.apache.zookeeper.server.quorum.auth.QuorumAuth$Status: org.apache.zookeeper.server.quorum.auth.QuorumAuth$Status getStatus(int)>(v);
goto label;
label:
v = new javax.security.sasl.SaslException;
v = virtualinvoke v.<java.net.Socket: java.net.SocketAddress getRemoteSocketAddress()>();
v = dynamicinvoke "makeConcatWithConstants" <java.lang.String (java.net.SocketAddress)>(v) <java.lang.invoke.StringConcatFactory: java.lang.invoke.CallSite makeConcatWithConstants(java.lang.invoke.MethodHandles$Lookup,java.lang.String,java.lang.invoke.MethodType,java.lang.String,java.lang.Object[])>("Authentication failed against server addr: \u0001");
specialinvoke v.<javax.security.sasl.SaslException: void <init>(java.lang.String)>(v);
throw v;
label:
v = <org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner: org.slf4j.Logger LOG>;
interfaceinvoke v.<org.slf4j.Logger: void warn(java.lang.String,java.lang.Object)>("Unknown status:{}!", v);
v = new javax.security.sasl.SaslException;
v = virtualinvoke v.<java.net.Socket: java.net.SocketAddress getRemoteSocketAddress()>();
v = dynamicinvoke "makeConcatWithConstants" <java.lang.String (java.net.SocketAddress)>(v) <java.lang.invoke.StringConcatFactory: java.lang.invoke.CallSite makeConcatWithConstants(java.lang.invoke.MethodHandles$Lookup,java.lang.String,java.lang.invoke.MethodType,java.lang.String,java.lang.Object[])>("Authentication failed against server addr: \u0001");
specialinvoke v.<javax.security.sasl.SaslException: void <init>(java.lang.String)>(v);
throw v;
label:
specialinvoke v.<org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner: void checkAuthStatus(java.net.Socket,org.apache.zookeeper.server.quorum.auth.QuorumAuth$Status)>(v, v);
label:
interfaceinvoke v.<javax.security.sasl.SaslClient: void dispose()>();
label:
goto label;
label:
v := @caughtexception;
v = <org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner: org.slf4j.Logger LOG>;
interfaceinvoke v.<org.slf4j.Logger: void error(java.lang.String,java.lang.Throwable)>("SaslClient dispose() failed", v);
goto label;
label:
v := @caughtexception;
if v == null goto label;
label:
interfaceinvoke v.<javax.security.sasl.SaslClient: void dispose()>();
label:
goto label;
label:
v := @caughtexception;
v = <org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner: org.slf4j.Logger LOG>;
interfaceinvoke v.<org.slf4j.Logger: void error(java.lang.String,java.lang.Throwable)>("SaslClient dispose() failed", v);
label:
throw v;
label:
return;
catch javax.security.sasl.SaslException from label to label with label;
catch java.lang.Throwable from label to label with label;
catch javax.security.sasl.SaslException from label to label with label;
}
private void checkAuthStatus(java.net.Socket, org.apache.zookeeper.server.quorum.auth.QuorumAuth$Status) throws javax.security.sasl.SaslException
{
java.net.Socket v;
org.slf4j.Logger v;
java.net.SocketAddress v, v;
javax.security.sasl.SaslException v;
org.apache.zookeeper.server.quorum.auth.QuorumAuth$Status v, v;
java.lang.String v;
org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner v;
v := @this: org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner;
v := @parameter: java.net.Socket;
v := @parameter: org.apache.zookeeper.server.quorum.auth.QuorumAuth$Status;
v = <org.apache.zookeeper.server.quorum.auth.QuorumAuth$Status: org.apache.zookeeper.server.quorum.auth.QuorumAuth$Status SUCCESS>;
if v != v goto label;
v = <org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner: org.slf4j.Logger LOG>;
v = virtualinvoke v.<java.net.Socket: java.net.SocketAddress getRemoteSocketAddress()>();
interfaceinvoke v.<org.slf4j.Logger: void info(java.lang.String,java.lang.Object,java.lang.Object)>("Successfully completed the authentication using SASL. server addr: {}, status: {}", v, v);
goto label;
label:
v = new javax.security.sasl.SaslException;
v = virtualinvoke v.<java.net.Socket: java.net.SocketAddress getRemoteSocketAddress()>();
v = dynamicinvoke "makeConcatWithConstants" <java.lang.String (java.net.SocketAddress,org.apache.zookeeper.server.quorum.auth.QuorumAuth$Status)>(v, v) <java.lang.invoke.StringConcatFactory: java.lang.invoke.CallSite makeConcatWithConstants(java.lang.invoke.MethodHandles$Lookup,java.lang.String,java.lang.invoke.MethodType,java.lang.String,java.lang.Object[])>("Authentication failed against server addr: \u, qpStatus: \u0001");
specialinvoke v.<javax.security.sasl.SaslException: void <init>(java.lang.String)>(v);
throw v;
label:
return;
}
private org.apache.zookeeper.server.quorum.QuorumAuthPacket receive(java.io.DataInputStream) throws java.io.IOException
{
java.io.DataInputStream v;
org.apache.zookeeper.server.quorum.QuorumAuthPacket v;
org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner v;
org.apache.jute.BinaryInputArchive v;
v := @this: org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner;
v := @parameter: java.io.DataInputStream;
v = new org.apache.zookeeper.server.quorum.QuorumAuthPacket;
specialinvoke v.<org.apache.zookeeper.server.quorum.QuorumAuthPacket: void <init>()>();
v = staticinvoke <org.apache.jute.BinaryInputArchive: org.apache.jute.BinaryInputArchive getArchive(java.io.InputStream)>(v);
virtualinvoke v.<org.apache.zookeeper.server.quorum.QuorumAuthPacket: void deserialize(org.apache.jute.InputArchive,java.lang.String)>(v, "qpconnect");
return v;
}
private void send(java.io.DataOutputStream, byte[]) throws java.io.IOException
{
byte[] v;
org.apache.jute.BinaryOutputArchive v;
java.io.DataOutputStream v;
org.apache.zookeeper.server.quorum.QuorumAuthPacket v;
org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner v;
java.io.BufferedOutputStream v;
org.apache.zookeeper.server.quorum.auth.QuorumAuth$Status v;
v := @this: org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner;
v := @parameter: java.io.DataOutputStream;
v := @parameter: byte[];
v = new java.io.BufferedOutputStream;
specialinvoke v.<java.io.BufferedOutputStream: void <init>(java.io.OutputStream)>(v);
v = staticinvoke <org.apache.jute.BinaryOutputArchive: org.apache.jute.BinaryOutputArchive getArchive(java.io.OutputStream)>(v);
v = <org.apache.zookeeper.server.quorum.auth.QuorumAuth$Status: org.apache.zookeeper.server.quorum.auth.QuorumAuth$Status IN_PROGRESS>;
v = staticinvoke <org.apache.zookeeper.server.quorum.auth.QuorumAuth: org.apache.zookeeper.server.quorum.QuorumAuthPacket createPacket(org.apache.zookeeper.server.quorum.auth.QuorumAuth$Status,byte[])>(v, v);
virtualinvoke v.<org.apache.jute.BinaryOutputArchive: void writeRecord(org.apache.jute.Record,java.lang.String)>(v, "qpconnect");
virtualinvoke v.<java.io.BufferedOutputStream: void flush()>();
return;
}
private byte[] createSaslToken(byte[], javax.security.sasl.SaslClient, org.apache.zookeeper.Login) throws javax.security.sasl.SaslException
{
java.lang.Throwable v;
byte[] v;
javax.security.sasl.SaslException v, v, v;
org.apache.zookeeper.Login v;
javax.security.sasl.SaslClient v;
int v, v;
java.lang.String v, v;
org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner v;
java.security.PrivilegedActionException v;
org.slf4j.Logger v;
org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner$1 v;
javax.security.auth.Subject v, v;
java.lang.Object v;
v := @this: org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner;
v := @parameter: byte[];
v := @parameter: javax.security.sasl.SaslClient;
v := @parameter: org.apache.zookeeper.Login;
if v != null goto label;
v = new javax.security.sasl.SaslException;
specialinvoke v.<javax.security.sasl.SaslException: void <init>(java.lang.String)>("Error in authenticating with a Zookeeper Quorum member: the quorum member\'s saslToken is null.");
throw v;
label:
v = virtualinvoke v.<org.apache.zookeeper.Login: javax.security.auth.Subject getSubject()>();
if v == null goto label;
entermonitor v;
label:
v = virtualinvoke v.<org.apache.zookeeper.Login: javax.security.auth.Subject getSubject()>();
v = new org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner$1;
specialinvoke v.<org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner$1: void <init>(org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner,byte[],javax.security.sasl.SaslClient)>(v, v, v);
v = staticinvoke <javax.security.auth.Subject: java.lang.Object doAs(javax.security.auth.Subject,java.security.PrivilegedExceptionAction)>(v, v);
label:
exitmonitor v;
label:
return v;
label:
v := @caughtexception;
v = dynamicinvoke "makeConcatWithConstants" <java.lang.String (java.security.PrivilegedActionException)>(v) <java.lang.invoke.StringConcatFactory: java.lang.invoke.CallSite makeConcatWithConstants(java.lang.invoke.MethodHandles$Lookup,java.lang.String,java.lang.invoke.MethodType,java.lang.String,java.lang.Object[])>("An error: (\u) occurred when evaluating Zookeeper Quorum Member\'s received SASL token.");
v = virtualinvoke v.<java.security.PrivilegedActionException: java.lang.String toString()>();
v = virtualinvoke v.<java.lang.String: int indexOf(java.lang.String)>("(Mechanism level: Server not found in Kerberos database (7) - UNKNOWN_SERVER)");
v = (int) -1;
if v <= v goto label;
v = dynamicinvoke "makeConcatWithConstants" <java.lang.String (java.lang.String)>(v) <java.lang.invoke.StringConcatFactory: java.lang.invoke.CallSite makeConcatWithConstants(java.lang.invoke.MethodHandles$Lookup,java.lang.String,java.lang.invoke.MethodType,java.lang.String,java.lang.Object[])>("\u This may be caused by Java\'s being unable to resolve the Zookeeper Quorum Member\'s hostname correctly. You may want to try to adding \'-Dsun.net.spi.nameservice.provider.1=dns,sun\' to your server\'s JVMFLAGS environment.");
label:
v = <org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner: org.slf4j.Logger LOG>;
interfaceinvoke v.<org.slf4j.Logger: void error(java.lang.String)>(v);
v = new javax.security.sasl.SaslException;
specialinvoke v.<javax.security.sasl.SaslException: void <init>(java.lang.String,java.lang.Throwable)>(v, v);
throw v;
label:
v := @caughtexception;
exitmonitor v;
throw v;
label:
v = new javax.security.sasl.SaslException;
specialinvoke v.<javax.security.sasl.SaslException: void <init>(java.lang.String)>("Cannot make SASL token without subject defined. For diagnosis, please look for WARNs and ERRORs in your log related to the Login class.");
throw v;
catch java.security.PrivilegedActionException from label to label with label;
catch java.lang.Throwable from label to label with label;
}
static void <clinit>()
{
org.slf4j.Logger v;
v = staticinvoke <org.slf4j.LoggerFactory: org.slf4j.Logger getLogger(java.lang.Class)>(class "Lorg/apache/zookeeper/server/quorum/auth/SaslQuorumAuthLearner;");
<org.apache.zookeeper.server.quorum.auth.SaslQuorumAuthLearner: org.slf4j.Logger LOG> = v;
return;
}
}