org.apache.drill.exec.rpc.user.security

Class TestUserBitSaslCompatibility

java.lang.Object

org.apache.drill.test.BaseTest

org.apache.drill.test.DrillTest

org.apache.drill.exec.ExecTest

org.apache.drill.test.BaseTestQuery

org.apache.drill.exec.rpc.user.security.TestUserBitSaslCompatibility

public class TestUserBitSaslCompatibility
extends BaseTestQuery

Helps to test different scenarios based on security configuration on client and Drillbit side with respect to SASL and specifically using PLAIN mechanism

Nested Class Summary

Nested classes/interfaces inherited from class org.apache.drill.test.BaseTestQuery

BaseTestQuery.ClassicTestServices, BaseTestQuery.SilentListener, BaseTestQuery.TestResultSet

Nested classes/interfaces inherited from class org.apache.drill.test.DrillTest

DrillTest.MemWatcher

Field Summary

Fields inherited from class org.apache.drill.test.BaseTestQuery

allocator, bits, client, config, serviceSet

Fields inherited from class org.apache.drill.exec.ExecTest

c, dirTestWatcher, optionManager

Fields inherited from class org.apache.drill.test.DrillTest

logOutcome, objectMapper, REPEAT_RULE, thrownException, TIMEOUT

Constructor Summary

Constructors

Constructor and Description
TestUserBitSaslCompatibility()

Method Summary

Modifier and Type	Method and Description
static void	setup()
void	testDisableDrillbitAuth_EnableClientAuthKerberos() Test showing when Drillbit is not configured for authentication whereas client explicitly requested for Kerberos authentication then connection fails due to new check before SASL Handshake.
void	testDisableDrillbitAuth_EnableClientAuthPlain() Test showing when Drillbit is not configured for authentication whereas client explicitly requested for PLAIN authentication then connection succeeds without authentication.
void	testDisableDrillbitAuth_EnableClientEncryption() Test showing failure before SASL handshake when Drillbit is not configured for authentication whereas client explicitly requested for encrypted connection.
void	testDisableDrillbitClientAuth() Test showing successful handshake when authentication is disabled on Drillbit side and client also doesn't provide any security properties in connection URL.
void	testDisableDrillbitEncryption_EnableClientEncryption() Test showing failure before SASL handshake when Drillbit is not configured for encryption whereas client explicitly requested for encrypted connection.
void	testEnableDrillbitAuth_DisableClientAuth() Test showing failure in SASL handshake when Drillbit is configured for authentication only whereas client doesn't provide any security properties like username/password in this case.
void	testEnableDrillbitClientAuth() Test showing successful SASL handshake when both Drillbit and client side authentication is enabled using PLAIN mechanism.
void	testEnableDrillbitClientEncryption_UsingPlain() Below test shows the failure in Sasl layer with client and Drillbit side encryption enabled using PLAIN mechanism.
void	testEnableDrillbitEncryption_DisableClientAuth() Test showing failure in SASL handshake when Drillbit is configured for encryption whereas client doesn't provide any security properties like username/password in this case.
void	testEnableDrillbitImpersonation_DisableClientAuth() Test showing successful handshake when authentication is disabled but impersonation is enabled on Drillbit side and client only provides USERNAME as a security property in connection URL.

Methods inherited from class org.apache.drill.test.BaseTestQuery

alterSession, cloneDefaultTestConfigProperties, closeClient, errorMsgTestHelper, getAllocator, getDrillbitContext, getFile, getPhysicalFileFromResource, getResultString, getUserPort, logResult, newTest, parseErrorHelper, printResult, resetAllSessionOptions, resetDrillbitCount, resetSessionOption, runSQL, setColumnWidth, setColumnWidths, setSessionOption, setSessionOption, setSessionOption, setSessionOption, setupDefaultTestCluster, test, test, testBuilder, testLogicalWithResults, testNoResult, testNoResult, testPhysical, testPhysicalFromFile, testPhysicalWithResults, testPreparedStatement, testRunAndPrint, testRunAndReturn, testSql, testSqlWithResults, testWithListener, updateClient, updateClient, updateClient, updateTestCluster, updateTestCluster

Methods inherited from class org.apache.drill.exec.ExecTest

clear, getLocalFileSystem, mockDrillbitContext, mockUsDateFormatSymbols, mockUtcDateTimeZone, parseExpr, setupOptionManager

Methods inherited from class org.apache.drill.test.DrillTest

escapeJsonString, finishDrillTest, initDrillTest

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

TestUserBitSaslCompatibility

public TestUserBitSaslCompatibility()

Method Detail

setup

public static void setup()

testDisableDrillbitAuth_EnableClientAuthPlain

public void testDisableDrillbitAuth_EnableClientAuthPlain()
                                                   throws Exception

Test showing when Drillbit is not configured for authentication whereas client explicitly requested for PLAIN authentication then connection succeeds without authentication.

Throws:

Exception

testDisableDrillbitAuth_EnableClientAuthKerberos

public void testDisableDrillbitAuth_EnableClientAuthKerberos()
                                                      throws Exception

Test showing when Drillbit is not configured for authentication whereas client explicitly requested for Kerberos authentication then connection fails due to new check before SASL Handshake.

Throws:

Exception

testDisableDrillbitAuth_EnableClientEncryption

public void testDisableDrillbitAuth_EnableClientEncryption()
                                                    throws Exception

Test showing failure before SASL handshake when Drillbit is not configured for authentication whereas client explicitly requested for encrypted connection.

Throws:

Exception

testDisableDrillbitEncryption_EnableClientEncryption

public void testDisableDrillbitEncryption_EnableClientEncryption()
                                                          throws Exception

Test showing failure before SASL handshake when Drillbit is not configured for encryption whereas client explicitly requested for encrypted connection.

Throws:

Exception

testEnableDrillbitAuth_DisableClientAuth

public void testEnableDrillbitAuth_DisableClientAuth()
                                              throws Exception

Test showing failure in SASL handshake when Drillbit is configured for authentication only whereas client doesn't provide any security properties like username/password in this case.

Throws:

Exception

testEnableDrillbitEncryption_DisableClientAuth

public void testEnableDrillbitEncryption_DisableClientAuth()
                                                    throws Exception

Test showing failure in SASL handshake when Drillbit is configured for encryption whereas client doesn't provide any security properties like username/password in this case.

Throws:

Exception

testEnableDrillbitClientAuth

public void testEnableDrillbitClientAuth()
                                  throws Exception

Test showing successful SASL handshake when both Drillbit and client side authentication is enabled using PLAIN mechanism.

Throws:

Exception

testEnableDrillbitClientEncryption_UsingPlain

public void testEnableDrillbitClientEncryption_UsingPlain()
                                                   throws Exception

Below test shows the failure in Sasl layer with client and Drillbit side encryption enabled using PLAIN mechanism. This is expected since PLAIN mechanism doesn't support encryption using SASL. Whereas same test setup using Kerberos or any other mechanism with encryption support will result in successful SASL handshake.

Throws:

Exception

testDisableDrillbitClientAuth

public void testDisableDrillbitClientAuth()
                                   throws Exception

Test showing successful handshake when authentication is disabled on Drillbit side and client also doesn't provide any security properties in connection URL.

Throws:

Exception

testEnableDrillbitImpersonation_DisableClientAuth

public void testEnableDrillbitImpersonation_DisableClientAuth()
                                                       throws Exception

Test showing successful handshake when authentication is disabled but impersonation is enabled on Drillbit side and client only provides USERNAME as a security property in connection URL.

Throws:

Exception