[04/51] [partial] servicemix-bundles git commit: Cleanup "old" bundle versions

[jb...@apache.org]

http://git-wip-us.apache.org/repos/asf/servicemix-bundles/blob/428046ec/hadoop-core-1.1.0/src/main/java/org/apache/hadoop/security/UserGroupInformation.java
----------------------------------------------------------------------
diff --git a/hadoop-core-1.1.0/src/main/java/org/apache/hadoop/security/UserGroupInformation.java b/hadoop-core-1.1.0/src/main/java/org/apache/hadoop/security/UserGroupInformation.java
deleted file mode 100644
index c6f1c5b..0000000
--- a/hadoop-core-1.1.0/src/main/java/org/apache/hadoop/security/UserGroupInformation.java
+++ /dev/null
@@ -1,1118 +0,0 @@
-/**
- * Licensed to the Apache Software Foundation (ASF) under one
- * or more contributor license agreements.  See the NOTICE file
- * distributed with this work for additional information
- * regarding copyright ownership.  The ASF licenses this file
- * to you under the Apache License, Version 2.0 (the
- * "License"); you may not use this file except in compliance
- * with the License.  You may obtain a copy of the License at
- *
- *     http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-package org.apache.hadoop.security;
-
-import static org.apache.hadoop.fs.CommonConfigurationKeys.HADOOP_SECURITY_AUTHENTICATION;
-
-import java.io.IOException;
-import java.lang.reflect.UndeclaredThrowableException;
-import java.security.AccessControlContext;
-import java.security.AccessController;
-import java.security.Principal;
-import java.security.PrivilegedAction;
-import java.security.PrivilegedActionException;
-import java.security.PrivilegedExceptionAction;
-import java.util.ArrayList;
-import java.util.Arrays;
-import java.util.Collection;
-import java.util.Collections;
-import java.util.HashMap;
-import java.util.List;
-import java.util.Map;
-import java.util.Set;
-
-import javax.security.auth.Subject;
-import javax.security.auth.callback.CallbackHandler;
-import javax.security.auth.kerberos.KerberosKey;
-import javax.security.auth.kerberos.KerberosPrincipal;
-import javax.security.auth.kerberos.KerberosTicket;
-import javax.security.auth.login.AppConfigurationEntry;
-import javax.security.auth.login.LoginContext;
-import javax.security.auth.login.LoginException;
-import javax.security.auth.login.AppConfigurationEntry.LoginModuleControlFlag;
-import javax.security.auth.spi.LoginModule;
-
-import org.apache.commons.logging.Log;
-import org.apache.commons.logging.LogFactory;
-import org.apache.hadoop.conf.Configuration;
-import org.apache.hadoop.fs.Path;
-import org.apache.hadoop.security.token.Token;
-import org.apache.hadoop.security.token.TokenIdentifier;
-import org.apache.hadoop.util.Shell;
-
-import com.sun.security.auth.NTUserPrincipal;
-import com.sun.security.auth.UnixPrincipal;
-import com.sun.security.auth.module.Krb5LoginModule;
-
-/**
- * User and group information for Hadoop.
- * This class wraps around a JAAS Subject and provides methods to determine the
- * user's username and groups. It supports both the Windows, Unix and Kerberos 
- * login modules.
- */
-public class UserGroupInformation {
-  private static final Log LOG =  LogFactory.getLog(UserGroupInformation.class);
-  /**
-   * Percentage of the ticket window to use before we renew ticket.
-   */
-  private static final float TICKET_RENEW_WINDOW = 0.80f;
-  
-  /**
-   * A login module that looks at the Kerberos, Unix, or Windows principal and
-   * adds the corresponding UserName.
-   */
-  public static class HadoopLoginModule implements LoginModule {
-    private Subject subject;
-
-    @Override
-    public boolean abort() throws LoginException {
-      return true;
-    }
-
-    private <T extends Principal> T getCanonicalUser(Class<T> cls) {
-      for(T user: subject.getPrincipals(cls)) {
-        return user;
-      }
-      return null;
-    }
-
-    @Override
-    public boolean commit() throws LoginException {
-      // if we already have a user, we are done.
-      if (!subject.getPrincipals(User.class).isEmpty()) {
-        return true;
-      }
-      Principal user = null;
-      // if we are using kerberos, try it out
-      if (useKerberos) {
-        user = getCanonicalUser(KerberosPrincipal.class);
-      }
-      // if we don't have a kerberos user, use the OS user
-      if (user == null) {
-        user = getCanonicalUser(OS_PRINCIPAL_CLASS);
-      }
-      // if we found the user, add our principal
-      if (user != null) {
-        subject.getPrincipals().add(new User(user.getName()));
-        return true;
-      }
-      LOG.error("Can't find user in " + subject);
-      throw new LoginException("Can't find user name");
-    }
-
-    @Override
-    public void initialize(Subject subject, CallbackHandler callbackHandler,
-                           Map<String, ?> sharedState, Map<String, ?> options) {
-      this.subject = subject;
-    }
-
-    @Override
-    public boolean login() throws LoginException {
-      return true;
-    }
-
-    @Override
-    public boolean logout() throws LoginException {
-      return true;
-    }
-  }
-
-  /** Metrics to track UGI activity */
-  static UgiInstrumentation metrics;
-  /** Are the static variables that depend on configuration initialized? */
-  private static boolean isInitialized = false;
-  /** Should we use Kerberos configuration? */
-  private static boolean useKerberos;
-  /** Server-side groups fetching service */
-  private static Groups groups;
-  /** The configuration to use */
-  private static Configuration conf;
-  
-  /** Leave 10 minutes between relogin attempts. */
-  private static final long MIN_TIME_BEFORE_RELOGIN = 10 * 60 * 1000L;
-  
-  /**Environment variable pointing to the token cache file*/
-  public static final String HADOOP_TOKEN_FILE_LOCATION = 
-    "HADOOP_TOKEN_FILE_LOCATION";
-  
-  /** 
-   * A method to initialize the fields that depend on a configuration.
-   * Must be called before useKerberos or groups is used.
-   */
-  private static synchronized void ensureInitialized() {
-    if (!isInitialized) {
-      initialize(new Configuration());
-    }
-  }
-
-  /**
-   * Set the configuration values for UGI.
-   * @param conf the configuration to use
-   */
-  private static synchronized void initialize(Configuration conf) {
-    String value = conf.get(HADOOP_SECURITY_AUTHENTICATION);
-    if (value == null || "simple".equals(value)) {
-      useKerberos = false;
-    } else if ("kerberos".equals(value)) {
-      useKerberos = true;
-    } else {
-      throw new IllegalArgumentException("Invalid attribute value for " +
-                                         HADOOP_SECURITY_AUTHENTICATION + 
-                                         " of " + value);
-    }
-    // If we haven't set up testing groups, use the configuration to find it
-    if (!(groups instanceof TestingGroups)) {
-      groups = Groups.getUserToGroupsMappingService(conf);
-    }
-    // Set the configuration for JAAS to be the Hadoop configuration. 
-    // This is done here rather than a static initializer to avoid a
-    // circular dependence.
-    javax.security.auth.login.Configuration.setConfiguration
-        (new HadoopConfiguration());
-    // give the configuration on how to translate Kerberos names
-    try {
-      KerberosName.setConfiguration(conf);
-    } catch (IOException ioe) {
-      throw new RuntimeException("Problem with Kerberos auth_to_local name " +
-                                 "configuration", ioe);
-    }
-    isInitialized = true;
-    UserGroupInformation.conf = conf;
-    metrics = UgiInstrumentation.create(conf);
-  }
-
-  /**
-   * Set the static configuration for UGI.
-   * In particular, set the security authentication mechanism and the
-   * group look up service.
-   * @param conf the configuration to use
-   */
-  public static void setConfiguration(Configuration conf) {
-    initialize(conf);
-  }
-  
-  /**
-   * Determine if UserGroupInformation is using Kerberos to determine
-   * user identities or is relying on simple authentication
-   * 
-   * @return true if UGI is working in a secure environment
-   */
-  public static boolean isSecurityEnabled() {
-    ensureInitialized();
-    return useKerberos;
-  }
-  
-  /**
-   * Information about the logged in user.
-   */
-  private static UserGroupInformation loginUser = null;
-  private static String keytabPrincipal = null;
-  private static String keytabFile = null;
-
-  private final Subject subject;
-  // All non-static fields must be read-only caches that come from the subject.
-  private final User user;
-  private final boolean isKeytab;
-  private final boolean isKrbTkt;
-  
-  private static final String OS_LOGIN_MODULE_NAME;
-  private static final Class<? extends Principal> OS_PRINCIPAL_CLASS;
-  private static final boolean windows = 
-                           System.getProperty("os.name").startsWith("Windows");
-  private static Thread renewerThread = null;
-  private static volatile boolean shouldRunRenewerThread = true;
-  
-  static {
-    if (windows) {
-      OS_LOGIN_MODULE_NAME = "com.sun.security.auth.module.NTLoginModule";
-      OS_PRINCIPAL_CLASS = NTUserPrincipal.class;
-    } else {
-      OS_LOGIN_MODULE_NAME = "com.sun.security.auth.module.UnixLoginModule";
-      OS_PRINCIPAL_CLASS = UnixPrincipal.class;
-    }
-  }
-  
-  private static class RealUser implements Principal {
-    private final UserGroupInformation realUser;
-    
-    RealUser(UserGroupInformation realUser) {
-      this.realUser = realUser;
-    }
-    
-    public String getName() {
-      return realUser.getUserName();
-    }
-    
-    public UserGroupInformation getRealUser() {
-      return realUser;
-    }
-    
-    @Override
-    public boolean equals(Object o) {
-      if (this == o) {
-        return true;
-      } else if (o == null || getClass() != o.getClass()) {
-        return false;
-      } else {
-        return realUser.equals(((RealUser) o).realUser);
-      }
-    }
-    
-    @Override
-    public int hashCode() {
-      return realUser.hashCode();
-    }
-    
-    @Override
-    public String toString() {
-      return realUser.toString();
-    }
-  }
-  
-  /**
-   * A JAAS configuration that defines the login modules that we want
-   * to use for login.
-   */
-  private static class HadoopConfiguration 
-      extends javax.security.auth.login.Configuration {
-    private static final String SIMPLE_CONFIG_NAME = "hadoop-simple";
-    private static final String USER_KERBEROS_CONFIG_NAME = 
-      "hadoop-user-kerberos";
-    private static final String KEYTAB_KERBEROS_CONFIG_NAME = 
-      "hadoop-keytab-kerberos";
-    
-    private static final AppConfigurationEntry OS_SPECIFIC_LOGIN =
-      new AppConfigurationEntry(OS_LOGIN_MODULE_NAME,
-                                LoginModuleControlFlag.REQUIRED,
-                                new HashMap<String,String>());
-    private static final AppConfigurationEntry HADOOP_LOGIN =
-      new AppConfigurationEntry(HadoopLoginModule.class.getName(),
-                                LoginModuleControlFlag.REQUIRED,
-                                new HashMap<String,String>());
-    private static final Map<String,String> USER_KERBEROS_OPTIONS = 
-      new HashMap<String,String>();
-    static {
-      USER_KERBEROS_OPTIONS.put("doNotPrompt", "true");
-      USER_KERBEROS_OPTIONS.put("useTicketCache", "true");
-      USER_KERBEROS_OPTIONS.put("renewTGT", "true");
-      String ticketCache = System.getenv("KRB5CCNAME");
-      if (ticketCache != null) {
-        USER_KERBEROS_OPTIONS.put("ticketCache", ticketCache);
-      }
-    }
-    private static final AppConfigurationEntry USER_KERBEROS_LOGIN =
-      new AppConfigurationEntry(Krb5LoginModule.class.getName(),
-                                LoginModuleControlFlag.OPTIONAL,
-                                USER_KERBEROS_OPTIONS);
-    private static final Map<String,String> KEYTAB_KERBEROS_OPTIONS = 
-      new HashMap<String,String>();
-    static {
-      KEYTAB_KERBEROS_OPTIONS.put("doNotPrompt", "true");
-      KEYTAB_KERBEROS_OPTIONS.put("useKeyTab", "true");
-      KEYTAB_KERBEROS_OPTIONS.put("storeKey", "true");
-    }
-    private static final AppConfigurationEntry KEYTAB_KERBEROS_LOGIN =
-      new AppConfigurationEntry(Krb5LoginModule.class.getName(),
-                                LoginModuleControlFlag.REQUIRED,
-                                KEYTAB_KERBEROS_OPTIONS);
-    
-    private static final AppConfigurationEntry[] SIMPLE_CONF = 
-      new AppConfigurationEntry[]{OS_SPECIFIC_LOGIN, HADOOP_LOGIN};
-
-    private static final AppConfigurationEntry[] USER_KERBEROS_CONF =
-      new AppConfigurationEntry[]{OS_SPECIFIC_LOGIN, USER_KERBEROS_LOGIN,
-                                  HADOOP_LOGIN};
-
-    private static final AppConfigurationEntry[] KEYTAB_KERBEROS_CONF =
-      new AppConfigurationEntry[]{KEYTAB_KERBEROS_LOGIN, HADOOP_LOGIN};
-
-    @Override
-    public AppConfigurationEntry[] getAppConfigurationEntry(String appName) {
-      if (SIMPLE_CONFIG_NAME.equals(appName)) {
-        return SIMPLE_CONF;
-      } else if (USER_KERBEROS_CONFIG_NAME.equals(appName)) {
-        return USER_KERBEROS_CONF;
-      } else if (KEYTAB_KERBEROS_CONFIG_NAME.equals(appName)) {
-        KEYTAB_KERBEROS_OPTIONS.put("keyTab", keytabFile);
-        KEYTAB_KERBEROS_OPTIONS.put("principal", keytabPrincipal);
-        return KEYTAB_KERBEROS_CONF;
-      }
-      return null;
-    }
-  }
-  
-  private LoginContext getLogin() {
-    return user.getLogin();
-  }
-  
-  private void setLogin(LoginContext login) {
-    user.setLogin(login);
-  }
-
-  /**
-   * Create a UserGroupInformation for the given subject.
-   * This does not change the subject or acquire new credentials.
-   * @param subject the user's subject
-   */
-  UserGroupInformation(Subject subject) {
-    this.subject = subject;
-    this.user = subject.getPrincipals(User.class).iterator().next();
-    this.isKeytab = !subject.getPrivateCredentials(KerberosKey.class).isEmpty();
-    this.isKrbTkt = !subject.getPrivateCredentials(KerberosTicket.class).isEmpty();
-  }
-  
-  /**
-   * checks if logged in using kerberos
-   * @return true if the subject logged via keytab or has a Kerberos TGT
-   */
-  public boolean hasKerberosCredentials() {
-    return isKeytab || isKrbTkt;
-  }
-
-  /**
-   * Return the current user, including any doAs in the current stack.
-   * @return the current user
-   * @throws IOException if login fails
-   */
-  public static UserGroupInformation getCurrentUser() throws IOException {
-    AccessControlContext context = AccessController.getContext();
-    Subject subject = Subject.getSubject(context);
-    // As the Apache Karaf provides the Subject by default, we need to make sure hadoopcan get the User.class information first
-    if (subject != null && subject.getPrincipals(User.class).iterator().hasNext()) {
-        return new UserGroupInformation(subject);
-    }
-    return getLoginUser();
-  }
-
-  /**
-   * Get the currently logged in user.
-   * @return the logged in user
-   * @throws IOException if login fails
-   */
-  public synchronized 
-  static UserGroupInformation getLoginUser() throws IOException {
-    if (loginUser == null) {
-      try {
-        Subject subject = new Subject();
-        LoginContext login;
-        if (isSecurityEnabled()) {
-          login = new LoginContext(HadoopConfiguration.USER_KERBEROS_CONFIG_NAME, subject);
-        } else {
-          login = new LoginContext(HadoopConfiguration.SIMPLE_CONFIG_NAME, subject);
-        }
-        login.login();
-        loginUser = new UserGroupInformation(subject);
-        loginUser.setLogin(login);
-        loginUser.setAuthenticationMethod(isSecurityEnabled() ?
-                                          AuthenticationMethod.KERBEROS :
-                                          AuthenticationMethod.SIMPLE);
-        loginUser = new UserGroupInformation(login.getSubject());
-        String fileLocation = System.getenv(HADOOP_TOKEN_FILE_LOCATION);
-        if (fileLocation != null && isSecurityEnabled()) {
-          // load the token storage file and put all of the tokens into the
-          // user.
-          Credentials cred = Credentials.readTokenStorageFile(
-              new Path("file:///" + fileLocation), conf);
-          for (Token<?> token: cred.getAllTokens()) {
-            loginUser.addToken(token);
-          }
-        }
-        loginUser.spawnAutoRenewalThreadForUserCreds();
-      } catch (LoginException le) {
-        throw new IOException("failure to login", le);
-      }
-    }
-    return loginUser;
-  }
-
-  /**
-   * Is this user logged in from a keytab file?
-   * @return true if the credentials are from a keytab file.
-   */
-  public boolean isFromKeytab() {
-    return isKeytab;
-  }
-  
-  /**
-   * Get the Kerberos TGT
-   * @return the user's TGT or null if none was found
-   */
-  private synchronized KerberosTicket getTGT() {
-    Set<KerberosTicket> tickets = 
-      subject.getPrivateCredentials(KerberosTicket.class);
-    for(KerberosTicket ticket: tickets) {
-      KerberosPrincipal server = ticket.getServer();
-      if (server.getName().equals("krbtgt/" + server.getRealm() + 
-                                  "@" + server.getRealm())) {
-        if (LOG.isDebugEnabled()) {
-          LOG.debug("Found tgt " + ticket);
-        }
-        return ticket;
-      }
-    }
-    return null;
-  }
-  
-  private long getRefreshTime(KerberosTicket tgt) {
-    long start = tgt.getStartTime().getTime();
-    long end = tgt.getEndTime().getTime();
-    return start + (long) ((end - start) * TICKET_RENEW_WINDOW);
-  }
-
-  /**Spawn a thread to do periodic renewals of kerberos credentials*/
-  private void spawnAutoRenewalThreadForUserCreds() {
-    if (isSecurityEnabled()) {
-      //spawn thread only if we have kerb credentials
-      if (user.getAuthenticationMethod() == AuthenticationMethod.KERBEROS &&
-          !isKeytab) {
-        renewerThread = new Thread(new Runnable() {
-
-          public void run() {
-            String cmd = conf.get("hadoop.kerberos.kinit.command",
-                                  "/usr/kerberos/bin/kinit");
-            KerberosTicket tgt = getTGT();
-            if (tgt == null) {
-              return;
-            }
-            long nextRefresh = getRefreshTime(tgt);
-            while (shouldRunRenewerThread) {
-              try {
-                long now = System.currentTimeMillis();
-                LOG.debug("Current time is " + now);
-                LOG.debug("Next refresh is " + nextRefresh);
-                if (now < nextRefresh) {
-                  Thread.sleep(nextRefresh - now);
-                }
-                Shell.execCommand(cmd, "-R");
-                LOG.debug("renewed ticket");
-                reloginFromTicketCache();
-                tgt = getTGT();
-                if (tgt == null) {
-                  LOG.warn("No TGT after renewal. Aborting renew thread for " +
-                           getUserName());
-                  return;
-                }
-                nextRefresh = Math.max(getRefreshTime(tgt),
-                                       now + MIN_TIME_BEFORE_RELOGIN);
-              } catch (InterruptedException ie) {
-                LOG.warn("Terminating renewal thread");
-                return;
-              } catch (IOException ie) {
-                LOG.warn("Exception encountered while running the" +
-                    " renewal command." + ie + 
-                    ". Aborting renew thread for " + user);
-                return;
-              }
-            }
-            LOG.info("TGT renewer thread exiting.");
-          }
-        });
-        renewerThread.setDaemon(true);
-        renewerThread.setName("TGT Renewer for " + getUserName());
-        renewerThread.start();
-      }
-    }
-  }
-  /**
-   * Log a user in from a keytab file. Loads a user identity from a keytab
-   * file and logs them in. They become the currently logged-in user.
-   * @param user the principal name to load from the keytab
-   * @param path the path to the keytab file
-   * @throws IOException if the keytab file can't be read
-   */
-  public synchronized
-  static void loginUserFromKeytab(String user,
-                                  String path
-                                  ) throws IOException {
-    if (!isSecurityEnabled()) {
-      return;
-    }
-
-    keytabFile = path;
-    keytabPrincipal = user;
-    Subject subject = new Subject();
-    LoginContext login;   
-    long start = 0;
-    // The renewer thread might have been spawned earlier if getLoginUser
-    // was called with the loginUser as null. 
-    // Just kill the thread. BTW loginUser is not null anymore and any 
-    // future call to getLoginUser will not spawn the thread.
-    if (renewerThread != null) {
-      renewerThread.interrupt();
-      shouldRunRenewerThread = false;
-      renewerThread = null;
-      LOG.info("Asked the TGT renewer thread to terminate");
-    }
-    try {
-      login = 
-        new LoginContext(HadoopConfiguration.KEYTAB_KERBEROS_CONFIG_NAME, subject);
-      start = System.currentTimeMillis();
-      login.login();
-      metrics.addLoginSuccess(System.currentTimeMillis() - start);
-      loginUser = new UserGroupInformation(subject);
-      loginUser.setLogin(login);
-      loginUser.setAuthenticationMethod(AuthenticationMethod.KERBEROS);
-    } catch (LoginException le) {
-      if (start > 0) {
-        metrics.addLoginFailure(System.currentTimeMillis() - start);
-      }
-      throw new IOException("Login failure for " + user + " from keytab " + 
-                            path, le);
-    }
-    LOG.info("Login successful for user " + keytabPrincipal
-        + " using keytab file " + keytabFile);
-  }
-  /**
-   * Re-Login a user in from the ticket cache.  This
-   * method assumes that login had happened already.
-   * The Subject field of this UserGroupInformation object is updated to have
-   * the new credentials.
-   * @throws IOException on a failure
-   */
-  public synchronized void reloginFromTicketCache()
-  throws IOException {
-    if (!isSecurityEnabled() || 
-        user.getAuthenticationMethod() != AuthenticationMethod.KERBEROS ||
-        !isKrbTkt)
-      return;
-    LoginContext login = getLogin();
-    if (login == null) {
-      throw new IOException("login must be done first");
-    }
-    if (!hasSufficientTimeElapsed()) {
-      return;
-    }
-    try {
-      LOG.info("Initiating logout for " + getUserName());
-      //clear up the kerberos state. But the tokens are not cleared! As per 
-      //the Java kerberos login module code, only the kerberos credentials
-      //are cleared
-      login.logout();
-      //login and also update the subject field of this instance to 
-      //have the new credentials (pass it to the LoginContext constructor)
-      login = 
-        new LoginContext(HadoopConfiguration.USER_KERBEROS_CONFIG_NAME, 
-            getSubject());
-      LOG.info("Initiating re-login for " + getUserName());
-      login.login();
-      setLogin(login);
-    } catch (LoginException le) {
-      throw new IOException("Login failure for " + getUserName(), le);
-    } 
-  }
-
-
-  /**
-   * Log a user in from a keytab file. Loads a user identity from a keytab
-   * file and login them in. This new user does not affect the currently
-   * logged-in user.
-   * @param user the principal name to load from the keytab
-   * @param path the path to the keytab file
-   * @throws IOException if the keytab file can't be read
-   */
-  public synchronized
-  static UserGroupInformation loginUserFromKeytabAndReturnUGI(String user,
-                                  String path
-                                  ) throws IOException {
-    if (!isSecurityEnabled())
-      return UserGroupInformation.getCurrentUser();
-    String oldKeytabFile = null;
-    String oldKeytabPrincipal = null;
-
-    long start = 0;
-    try {
-      oldKeytabFile = keytabFile;
-      oldKeytabPrincipal = keytabPrincipal;
-      keytabFile = path;
-      keytabPrincipal = user;
-      Subject subject = new Subject();
-      
-      LoginContext login = 
-        new LoginContext(HadoopConfiguration.KEYTAB_KERBEROS_CONFIG_NAME, subject); 
-       
-      start = System.currentTimeMillis();
-      login.login();
-      metrics.addLoginSuccess(System.currentTimeMillis() - start);
-      UserGroupInformation newLoginUser = new UserGroupInformation(subject);
-      newLoginUser.setLogin(login);
-      newLoginUser.setAuthenticationMethod(AuthenticationMethod.KERBEROS);
-      
-      return newLoginUser;
-    } catch (LoginException le) {
-      if (start > 0) {
-        metrics.addLoginFailure(System.currentTimeMillis() - start);
-      }
-      throw new IOException("Login failure for " + user + " from keytab " + 
-                            path, le);
-    } finally {
-      if(oldKeytabFile != null) keytabFile = oldKeytabFile;
-      if(oldKeytabPrincipal != null) keytabPrincipal = oldKeytabPrincipal;
-    }
-  }
-
-  /**
-   * Re-login a user from keytab if TGT is expired or is close to expiry.
-   * 
-   * @throws IOException
-   */
-  public synchronized void checkTGTAndReloginFromKeytab() throws IOException {
-    //TODO: The method reloginFromKeytab should be refactored to use this
-    //      implementation.
-    if (!isSecurityEnabled()
-        || user.getAuthenticationMethod() != AuthenticationMethod.KERBEROS
-        || !isKeytab)
-      return;
-    KerberosTicket tgt = getTGT();
-    if (tgt != null && System.currentTimeMillis() < getRefreshTime(tgt)) {
-      return;
-    }
-    reloginFromKeytab();
-  }
-  
-  /**
-   * Re-Login a user in from a keytab file. Loads a user identity from a keytab
-   * file and logs them in. They become the currently logged-in user. This
-   * method assumes that {@link #loginUserFromKeytab(String, String)} had 
-   * happened already.
-   * The Subject field of this UserGroupInformation object is updated to have
-   * the new credentials.
-   * @throws IOException on a failure
-   */
-  public synchronized void reloginFromKeytab()
-  throws IOException {
-    if (!isSecurityEnabled() || 
-        user.getAuthenticationMethod() != AuthenticationMethod.KERBEROS ||
-        !isKeytab)
-      return;
-    LoginContext login = getLogin();
-    if (login == null || keytabFile == null) {
-      throw new IOException("loginUserFromKeyTab must be done first");
-    }
-    if (!hasSufficientTimeElapsed()) {
-      return;
-    }
-    long start = 0;
-    try {
-      LOG.info("Initiating logout for " + getUserName());
-      synchronized (UserGroupInformation.class) {
-        //clear up the kerberos state. But the tokens are not cleared! As per 
-        //the Java kerberos login module code, only the kerberos credentials
-        //are cleared
-        login.logout();
-        //login and also update the subject field of this instance to 
-        //have the new credentials (pass it to the LoginContext constructor)
-        login = 
-          new LoginContext(HadoopConfiguration.KEYTAB_KERBEROS_CONFIG_NAME, 
-                           getSubject());
-        LOG.info("Initiating re-login for " + keytabPrincipal);
-        start = System.currentTimeMillis();
-        login.login();
-        metrics.addLoginSuccess(System.currentTimeMillis() - start);
-        setLogin(login);
-      }
-    } catch (LoginException le) {
-      if (start > 0) {
-        metrics.addLoginFailure(System.currentTimeMillis() - start);
-      }
-      throw new IOException("Login failure for " + keytabPrincipal + 
-          " from keytab " + keytabFile, le);
-    } 
-  }
-
-  private boolean hasSufficientTimeElapsed() {
-    long now = System.currentTimeMillis();
-    if (now - user.getLastLogin() < MIN_TIME_BEFORE_RELOGIN ) {
-      LOG.warn("Not attempting to re-login since the last re-login was " +
-          "attempted less than " + (MIN_TIME_BEFORE_RELOGIN/1000) + " seconds"+
-          " before.");
-      return false;
-    }
-    // register most recent relogin attempt
-    user.setLastLogin(now);
-    return true;
-  }
-  
-  /**
-   * Did the login happen via keytab
-   * @return true or false
-   */
-  public synchronized static boolean isLoginKeytabBased() throws IOException {
-    return getLoginUser().isKeytab;
-  }
-
-  /**
-   * Create a user from a login name. It is intended to be used for remote
-   * users in RPC, since it won't have any credentials.
-   * @param user the full user principal name, must not be empty or null
-   * @return the UserGroupInformation for the remote user.
-   */
-  public static UserGroupInformation createRemoteUser(String user) {
-    if (user == null || "".equals(user)) {
-      throw new IllegalArgumentException("Null user");
-    }
-    Subject subject = new Subject();
-    subject.getPrincipals().add(new User(user));
-    UserGroupInformation result = new UserGroupInformation(subject);
-    result.setAuthenticationMethod(AuthenticationMethod.SIMPLE);
-    return result;
-  }
-
-  /**
-   * existing types of authentications' methods
-   */
-  public static enum AuthenticationMethod {
-    SIMPLE,
-    KERBEROS,
-    TOKEN,
-    CERTIFICATE,
-    KERBEROS_SSL,
-    PROXY;
-  }
-
-  /**
-   * Create a proxy user using username of the effective user and the ugi of the
-   * real user.
-   * @param user
-   * @param realUser
-   * @return proxyUser ugi
-   */
-  public static UserGroupInformation createProxyUser(String user,
-      UserGroupInformation realUser) {
-    if (user == null || "".equals(user)) {
-      throw new IllegalArgumentException("Null user");
-    }
-    if (realUser == null) {
-      throw new IllegalArgumentException("Null real user");
-    }
-    Subject subject = new Subject();
-    Set<Principal> principals = subject.getPrincipals();
-    principals.add(new User(user));
-    principals.add(new RealUser(realUser));
-    UserGroupInformation result =new UserGroupInformation(subject);
-    result.setAuthenticationMethod(AuthenticationMethod.PROXY);
-    return result;
-  }
-
-  /**
-   * get RealUser (vs. EffectiveUser)
-   * @return realUser running over proxy user
-   */
-  public UserGroupInformation getRealUser() {
-    for (RealUser p: subject.getPrincipals(RealUser.class)) {
-      return p.getRealUser();
-    }
-    return null;
-  }
-
-
-  
-  /**
-   * This class is used for storing the groups for testing. It stores a local
-   * map that has the translation of usernames to groups.
-   */
-  private static class TestingGroups extends Groups {
-    private final Map<String, List<String>> userToGroupsMapping = 
-      new HashMap<String,List<String>>();
-    
-    private TestingGroups() {
-      super(new org.apache.hadoop.conf.Configuration());
-    }
-    
-    @Override
-    public List<String> getGroups(String user) {
-      List<String> result = userToGroupsMapping.get(user);
-      if (result == null) {
-        result = new ArrayList<String>();
-      }
-      return result;
-    }
-
-    private void setUserGroups(String user, String[] groups) {
-      userToGroupsMapping.put(user, Arrays.asList(groups));
-    }
-  }
-
-  /**
-   * Create a UGI for testing HDFS and MapReduce
-   * @param user the full user principal name
-   * @param userGroups the names of the groups that the user belongs to
-   * @return a fake user for running unit tests
-   */
-  public static UserGroupInformation createUserForTesting(String user, 
-                                                          String[] userGroups) {
-    ensureInitialized();
-    UserGroupInformation ugi = createRemoteUser(user);
-    // make sure that the testing object is setup
-    if (!(groups instanceof TestingGroups)) {
-      groups = new TestingGroups();
-    }
-    // add the user groups
-    ((TestingGroups) groups).setUserGroups(ugi.getShortUserName(), userGroups);
-    return ugi;
-  }
-
-
-  /**
-   * Create a proxy user UGI for testing HDFS and MapReduce
-   * 
-   * @param user
-   *          the full user principal name for effective user
-   * @param realUser
-   *          UGI of the real user
-   * @param userGroups
-   *          the names of the groups that the user belongs to
-   * @return a fake user for running unit tests
-   */
-  public static UserGroupInformation createProxyUserForTesting(String user,
-      UserGroupInformation realUser, String[] userGroups) {
-    ensureInitialized();
-    UserGroupInformation ugi = createProxyUser(user, realUser);
-    // make sure that the testing object is setup
-    if (!(groups instanceof TestingGroups)) {
-      groups = new TestingGroups();
-    }
-    // add the user groups
-    ((TestingGroups) groups).setUserGroups(ugi.getShortUserName(), userGroups);
-    return ugi;
-  }
-  
-  /**
-   * Get the user's login name.
-   * @return the user's name up to the first '/' or '@'.
-   */
-  public String getShortUserName() {
-    for (User p: subject.getPrincipals(User.class)) {
-      return p.getShortName();
-    }
-    return null;
-  }
-
-  /**
-   * Get the user's full principal name.
-   * @return the user's full principal name.
-   */
-  public String getUserName() {
-    return user.getName();
-  }
-
-  /**
-   * Add a TokenIdentifier to this UGI. The TokenIdentifier has typically been
-   * authenticated by the RPC layer as belonging to the user represented by this
-   * UGI.
-   * 
-   * @param tokenId
-   *          tokenIdentifier to be added
-   * @return true on successful add of new tokenIdentifier
-   */
-  public synchronized boolean addTokenIdentifier(TokenIdentifier tokenId) {
-    return subject.getPublicCredentials().add(tokenId);
-  }
-
-  /**
-   * Get the set of TokenIdentifiers belonging to this UGI
-   * 
-   * @return the set of TokenIdentifiers belonging to this UGI
-   */
-  public synchronized Set<TokenIdentifier> getTokenIdentifiers() {
-    return subject.getPublicCredentials(TokenIdentifier.class);
-  }
-  
-  /**
-   * Add a token to this UGI
-   * 
-   * @param token Token to be added
-   * @return true on successful add of new token
-   */
-  public synchronized boolean addToken(Token<? extends TokenIdentifier> token) {
-    return subject.getPrivateCredentials().add(token);
-  }
-  
-  /**
-   * Obtain the collection of tokens associated with this user.
-   * 
-   * @return an unmodifiable collection of tokens associated with user
-   */
-  public synchronized 
-  Collection<Token<? extends TokenIdentifier>> getTokens() {
-    Set<Object> creds = subject.getPrivateCredentials();
-    List<Token<?>> result = new ArrayList<Token<?>>(creds.size());
-    for(Object o: creds) {
-      if (o instanceof Token<?>) {
-        result.add((Token<?>) o);
-      }
-    }
-    return Collections.unmodifiableList(result);
-  }
-
-  /**
-   * Get the group names for this user.
-   * @return the list of users with the primary group first. If the command
-   *    fails, it returns an empty list.
-   */
-  public synchronized String[] getGroupNames() {
-    ensureInitialized();
-    try {
-      List<String> result = groups.getGroups(getShortUserName());
-      return result.toArray(new String[result.size()]);
-    } catch (IOException ie) {
-      LOG.warn("No groups available for user " + getShortUserName());
-      return new String[0];
-    }
-  }
-  
-  /**
-   * Return the username.
-   */
-  @Override
-  public String toString() {
-    if (getRealUser() != null) {
-      return getUserName() + " via " +  getRealUser().toString();
-    } else {
-      return getUserName();
-    }
-  }
-
-  /**
-   * Sets the authentication method in the subject
-   * 
-   * @param authMethod
-   */
-  public synchronized 
-  void setAuthenticationMethod(AuthenticationMethod authMethod) {
-    user.setAuthenticationMethod(authMethod);
-  }
-
-  /**
-   * Get the authentication method from the subject
-   * 
-   * @return AuthenticationMethod in the subject, null if not present.
-   */
-  public synchronized AuthenticationMethod getAuthenticationMethod() {
-    return user.getAuthenticationMethod();
-  }
-
-  /**
-   * Compare the subjects to see if they are equal to each other.
-   */
-  @Override
-  public boolean equals(Object o) {
-    if (o == this) {
-      return true;
-    } else if (o == null || getClass() != o.getClass()) {
-      return false;
-    } else {
-      return subject == ((UserGroupInformation) o).subject;
-    }
-  }
-
-  /**
-   * Return the hash of the subject.
-   */
-  @Override
-  public int hashCode() {
-    return System.identityHashCode(subject);
-  }
-
-  /**
-   * Get the underlying subject from this ugi.
-   * @return the subject that represents this user.
-   */
-  protected Subject getSubject() {
-    return subject;
-  }
-
-  /**
-   * Run the given action as the user.
-   * @param <T> the return type of the run method
-   * @param action the method to execute
-   * @return the value from the run method
-   */
-  public <T> T doAs(PrivilegedAction<T> action) {
-    return Subject.doAs(subject, action);
-  }
-  
-  /**
-   * Run the given action as the user, potentially throwing an exception.
-   * @param <T> the return type of the run method
-   * @param action the method to execute
-   * @return the value from the run method
-   * @throws IOException if the action throws an IOException
-   * @throws Error if the action throws an Error
-   * @throws RuntimeException if the action throws a RuntimeException
-   * @throws InterruptedException if the action throws an InterruptedException
-   * @throws UndeclaredThrowableException if the action throws something else
-   */
-  public <T> T doAs(PrivilegedExceptionAction<T> action
-                    ) throws IOException, InterruptedException {
-    try {
-      return Subject.doAs(subject, action);
-    } catch (PrivilegedActionException pae) {
-      Throwable cause = pae.getCause();
-      if (cause instanceof IOException) {
-        throw (IOException) cause;
-      } else if (cause instanceof Error) {
-        throw (Error) cause;
-      } else if (cause instanceof RuntimeException) {
-        throw (RuntimeException) cause;
-      } else if (cause instanceof InterruptedException) {
-        throw (InterruptedException) cause;
-      } else {
-        throw new UndeclaredThrowableException(pae,"Unknown exception in doAs");
-      }
-    }
-  }
-
-  private void print() throws IOException {
-    System.out.println("User: " + getUserName());
-    System.out.print("Group Ids: ");
-    System.out.println();
-    String[] groups = getGroupNames();
-    System.out.print("Groups: ");
-    for(int i=0; i < groups.length; i++) {
-      System.out.print(groups[i] + " ");
-    }
-    System.out.println();    
-  }
-
-  /**
-   * A test method to print out the current user's UGI.
-   * @param args if there are two arguments, read the user from the keytab
-   * and print it out.
-   * @throws Exception
-   */
-  public static void main(String [] args) throws Exception {
-  System.out.println("Getting UGI for current user");
-    UserGroupInformation ugi = getCurrentUser();
-    ugi.print();
-    System.out.println("UGI: " + ugi);
-    System.out.println("Auth method " + ugi.user.getAuthenticationMethod());
-    System.out.println("Keytab " + ugi.isKeytab);
-    System.out.println("============================================================");
-    
-    if (args.length == 2) {
-      System.out.println("Getting UGI from keytab....");
-      loginUserFromKeytab(args[0], args[1]);
-      getCurrentUser().print();
-      System.out.println("Keytab: " + ugi);
-      System.out.println("Auth method " + loginUser.user.getAuthenticationMethod());
-      System.out.println("Keytab " + loginUser.isKeytab);
-    }
-  }
-
-}
-

http://git-wip-us.apache.org/repos/asf/servicemix-bundles/blob/428046ec/hadoop-core-1.1.0/src/main/resources/OSGI-INF/bundle.info
----------------------------------------------------------------------
diff --git a/hadoop-core-1.1.0/src/main/resources/OSGI-INF/bundle.info b/hadoop-core-1.1.0/src/main/resources/OSGI-INF/bundle.info
deleted file mode 100644
index 9a4b558..0000000
--- a/hadoop-core-1.1.0/src/main/resources/OSGI-INF/bundle.info
+++ /dev/null
@@ -1,17 +0,0 @@
-\u001B[1mSYNOPSIS\u001B[0m
-    ${project.description}
-
-    Original Maven URL:
-        \u001B[33mmvn:${pkgGroupId}/${pkgArtifactId}/${pkgVersion}\u001B[0m
-
-\u001B[1mDESCRIPTION\u001B[0m
-    The Apache™ Hadoop™ project develops open-source software for reliable, scalable, distributed computing.
-
-    The Apache Hadoop software library is a framework that allows for the distributed processing of large data sets
-    across clusters of computers using a simple programming model. It is designed to scale up from single servers
-    to thousands of machines, each offering local computation and storage. Rather than rely on hardware to deliver
-    high-avaiability, the library itself is designed to detect and handle failures at the application layer, so
-    delivering a highly-availabile service on top of a cluster of computers, each of which may be prone to failures.
-
-\u001B[1mSEE ALSO\u001B[0m
-    \u001B[36mhttp://hadoop.apache.org/\u001B[0m

http://git-wip-us.apache.org/repos/asf/servicemix-bundles/blob/428046ec/hadoop-core-1.1.1/pom.xml
----------------------------------------------------------------------
diff --git a/hadoop-core-1.1.1/pom.xml b/hadoop-core-1.1.1/pom.xml
deleted file mode 100644
index 580dc2f..0000000
--- a/hadoop-core-1.1.1/pom.xml
+++ /dev/null
@@ -1,136 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
-
-    <!--
-
-        Licensed to the Apache Software Foundation (ASF) under one or more
-        contributor license agreements.  See the NOTICE file distributed with
-        this work for additional information regarding copyright ownership.
-        The ASF licenses this file to You under the Apache License, Version 2.0
-        (the "License"); you may not use this file except in compliance with
-        the License.  You may obtain a copy of the License at
-
-           http://www.apache.org/licenses/LICENSE-2.0
-
-        Unless required by applicable law or agreed to in writing, software
-        distributed under the License is distributed on an "AS IS" BASIS,
-        WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-        See the License for the specific language governing permissions and
-        limitations under the License.
-    -->
-
-    <modelVersion>4.0.0</modelVersion>
-
-    <parent>
-        <groupId>org.apache.servicemix.bundles</groupId>
-        <artifactId>bundles-pom</artifactId>
-        <version>10</version>
-        <relativePath>../bundles-pom/pom.xml</relativePath>
-    </parent>
-
-    <groupId>org.apache.servicemix.bundles</groupId>
-    <artifactId>org.apache.servicemix.bundles.hadoop-core</artifactId>
-    <version>1.1.1_2-SNAPSHOT</version>
-    <packaging>bundle</packaging>
-    <name>Apache ServiceMix :: Bundles :: ${pkgArtifactId}</name>
-    <description>This OSGi bundle wraps ${pkgArtifactId} ${pkgVersion} jar file.</description>
-
-    <properties>
-        <pkgGroupId>org.apache.hadoop</pkgGroupId>
-        <pkgArtifactId>hadoop-core</pkgArtifactId>
-        <pkgVersion>1.1.1</pkgVersion>
-        <servicemix.osgi.export.pkg>
-            org.apache.hadoop
-        </servicemix.osgi.export.pkg>
-        <servicemix.osgi.import.pkg>
-            javax.crypto*,
-            javax.management*,
-            javax.naming*,
-            javax.net*,
-            javax.security.auth*,
-            javax.security.sasl,
-            javax.servlet*,
-            javax.xml*,
-            javax.ws.rs*;resolution:=optional,
-            org.xml.sax*,
-            org.w3c.dom,
-            com.sun.jersey*;resolution:=optional,
-            org.apache.commons.codec.binary,
-            org.apache.commons.configuration,
-            org.apache.commons.daemon,
-            org.apache.commons.httpclient*,
-            org.apache.commons.lang,
-            org.apache.commons.math.util,
-            org.apache.commons.net*,
-            org.apache.commons.io;resolution:=optional,
-            org.codehaus.jackson*,
-            org.mortbay*;version="[6,8)",
-            com.sun.security*;resolution:=optional,
-            sun.net*;resolution:=optional,
-            org.apache.commons.cli;resolution:=optional,
-            org.apache.commons.logging*;resolution:=optional,
-            org.apache.jasper.runtime;version="[5,7)";resolution:=optional,
-            org.apache.log4j*;resolution:=optional,
-            org.apache.tools.ant*;resolution:=optional,
-            org.ietf.jgss;resolution:=optional,
-            org.jets3t.service*;resolution:=optional,
-            org.kosmix*;resolution:=optional,
-            org.znerd.xmlenc;resolution:=optional,
-            org.slf4j;resolution:=optional
-        </servicemix.osgi.import.pkg>
-    </properties>
-
-    <dependencies>
-        <dependency>
-            <groupId>${pkgGroupId}</groupId>
-            <artifactId>${pkgArtifactId}</artifactId>
-            <version>${pkgVersion}</version>
-            <optional>false</optional>
-        </dependency>
-
-        <!-- sources -->
-        <!-- Not available on Central
-        <dependency>
-            <groupId>${pkgGroupId}</groupId>
-            <artifactId>${pkgArtifactId}</artifactId>
-            <version>${pkgVersion}</version>
-            <classifier>sources</classifier>
-            <optional>true</optional>
-        </dependency>
-        -->
-    </dependencies>
-
-    <build>
-        <plugins>
-            <plugin>
-                <groupId>org.apache.maven.plugins</groupId>
-                <artifactId>maven-shade-plugin</artifactId>
-                <executions>
-                    <execution>
-                        <phase>package</phase>
-                        <goals>
-                            <goal>shade</goal>
-                        </goals>
-                        <configuration>
-                            <artifactSet>
-                                <includes>
-                                    <include>${pkgGroupId}:${pkgArtifactId}</include>
-                                </includes>
-                            </artifactSet>
-                            <filters>
-                                <filter>
-                                    <artifact>${pkgGroupId}:${pkgArtifactId}</artifact>
-                                    <excludes>
-                                        <exclude>**</exclude>
-                                    </excludes>
-                                </filter>
-                            </filters>
-                            <createDependencyReducedPom>true</createDependencyReducedPom>
-                            <promoteTransitiveDependencies>true</promoteTransitiveDependencies>
-                        </configuration>
-                    </execution>
-                </executions>
-            </plugin>
-        </plugins>
-    </build>
-</project>

http://git-wip-us.apache.org/repos/asf/servicemix-bundles/blob/428046ec/hadoop-core-1.1.1/src/main/java/org/apache/hadoop/security/UserGroupInformation.java
----------------------------------------------------------------------
diff --git a/hadoop-core-1.1.1/src/main/java/org/apache/hadoop/security/UserGroupInformation.java b/hadoop-core-1.1.1/src/main/java/org/apache/hadoop/security/UserGroupInformation.java
deleted file mode 100644
index b5b79bb..0000000
--- a/hadoop-core-1.1.1/src/main/java/org/apache/hadoop/security/UserGroupInformation.java
+++ /dev/null
@@ -1,1118 +0,0 @@
-/**
- * Licensed to the Apache Software Foundation (ASF) under one
- * or more contributor license agreements.  See the NOTICE file
- * distributed with this work for additional information
- * regarding copyright ownership.  The ASF licenses this file
- * to you under the Apache License, Version 2.0 (the
- * "License"); you may not use this file except in compliance
- * with the License.  You may obtain a copy of the License at
- *
- *     http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-package org.apache.hadoop.security;
-
-import static org.apache.hadoop.fs.CommonConfigurationKeys.HADOOP_SECURITY_AUTHENTICATION;
-
-import java.io.IOException;
-import java.lang.reflect.UndeclaredThrowableException;
-import java.security.AccessControlContext;
-import java.security.AccessController;
-import java.security.Principal;
-import java.security.PrivilegedAction;
-import java.security.PrivilegedActionException;
-import java.security.PrivilegedExceptionAction;
-import java.util.ArrayList;
-import java.util.Arrays;
-import java.util.Collection;
-import java.util.Collections;
-import java.util.HashMap;
-import java.util.List;
-import java.util.Map;
-import java.util.Set;
-
-import javax.security.auth.Subject;
-import javax.security.auth.callback.CallbackHandler;
-import javax.security.auth.kerberos.KerberosKey;
-import javax.security.auth.kerberos.KerberosPrincipal;
-import javax.security.auth.kerberos.KerberosTicket;
-import javax.security.auth.login.AppConfigurationEntry;
-import javax.security.auth.login.LoginContext;
-import javax.security.auth.login.LoginException;
-import javax.security.auth.login.AppConfigurationEntry.LoginModuleControlFlag;
-import javax.security.auth.spi.LoginModule;
-
-import org.apache.commons.logging.Log;
-import org.apache.commons.logging.LogFactory;
-import org.apache.hadoop.conf.Configuration;
-import org.apache.hadoop.fs.Path;
-import org.apache.hadoop.security.token.Token;
-import org.apache.hadoop.security.token.TokenIdentifier;
-import org.apache.hadoop.util.Shell;
-
-import com.sun.security.auth.NTUserPrincipal;
-import com.sun.security.auth.UnixPrincipal;
-import com.sun.security.auth.module.Krb5LoginModule;
-
-/**
- * User and group information for Hadoop.
- * This class wraps around a JAAS Subject and provides methods to determine the
- * user's username and groups. It supports both the Windows, Unix and Kerberos 
- * login modules.
- */
-public class UserGroupInformation {
-  private static final Log LOG =  LogFactory.getLog(UserGroupInformation.class);
-  /**
-   * Percentage of the ticket window to use before we renew ticket.
-   */
-  private static final float TICKET_RENEW_WINDOW = 0.80f;
-  
-  /**
-   * A login module that looks at the Kerberos, Unix, or Windows principal and
-   * adds the corresponding UserName.
-   */
-  public static class HadoopLoginModule implements LoginModule {
-    private Subject subject;
-
-    @Override
-    public boolean abort() throws LoginException {
-      return true;
-    }
-
-    private <T extends Principal> T getCanonicalUser(Class<T> cls) {
-      for(T user: subject.getPrincipals(cls)) {
-        return user;
-      }
-      return null;
-    }
-
-    @Override
-    public boolean commit() throws LoginException {
-      // if we already have a user, we are done.
-      if (!subject.getPrincipals(User.class).isEmpty()) {
-        return true;
-      }
-      Principal user = null;
-      // if we are using kerberos, try it out
-      if (useKerberos) {
-        user = getCanonicalUser(KerberosPrincipal.class);
-      }
-      // if we don't have a kerberos user, use the OS user
-      if (user == null) {
-        user = getCanonicalUser(OS_PRINCIPAL_CLASS);
-      }
-      // if we found the user, add our principal
-      if (user != null) {
-        subject.getPrincipals().add(new User(user.getName()));
-        return true;
-      }
-      LOG.error("Can't find user in " + subject);
-      throw new LoginException("Can't find user name");
-    }
-
-    @Override
-    public void initialize(Subject subject, CallbackHandler callbackHandler,
-                           Map<String, ?> sharedState, Map<String, ?> options) {
-      this.subject = subject;
-    }
-
-    @Override
-    public boolean login() throws LoginException {
-      return true;
-    }
-
-    @Override
-    public boolean logout() throws LoginException {
-      return true;
-    }
-  }
-
-  /** Metrics to track UGI activity */
-  static UgiInstrumentation metrics;
-  /** Are the static variables that depend on configuration initialized? */
-  private static boolean isInitialized = false;
-  /** Should we use Kerberos configuration? */
-  private static boolean useKerberos;
-  /** Server-side groups fetching service */
-  private static Groups groups;
-  /** The configuration to use */
-  private static Configuration conf;
-  
-  /** Leave 10 minutes between relogin attempts. */
-  private static final long MIN_TIME_BEFORE_RELOGIN = 10 * 60 * 1000L;
-  
-  /**Environment variable pointing to the token cache file*/
-  public static final String HADOOP_TOKEN_FILE_LOCATION = 
-    "HADOOP_TOKEN_FILE_LOCATION";
-  
-  /** 
-   * A method to initialize the fields that depend on a configuration.
-   * Must be called before useKerberos or groups is used.
-   */
-  private static synchronized void ensureInitialized() {
-    if (!isInitialized) {
-      initialize(new Configuration());
-    }
-  }
-
-  /**
-   * Set the configuration values for UGI.
-   * @param conf the configuration to use
-   */
-  private static synchronized void initialize(Configuration conf) {
-    String value = conf.get(HADOOP_SECURITY_AUTHENTICATION);
-    if (value == null || "simple".equals(value)) {
-      useKerberos = false;
-    } else if ("kerberos".equals(value)) {
-      useKerberos = true;
-    } else {
-      throw new IllegalArgumentException("Invalid attribute value for " +
-                                         HADOOP_SECURITY_AUTHENTICATION + 
-                                         " of " + value);
-    }
-    // If we haven't set up testing groups, use the configuration to find it
-    if (!(groups instanceof TestingGroups)) {
-      groups = Groups.getUserToGroupsMappingService(conf);
-    }
-    // Set the configuration for JAAS to be the Hadoop configuration. 
-    // This is done here rather than a static initializer to avoid a
-    // circular dependence.
-    javax.security.auth.login.Configuration.setConfiguration
-        (new HadoopConfiguration());
-    // give the configuration on how to translate Kerberos names
-    try {
-      KerberosName.setConfiguration(conf);
-    } catch (IOException ioe) {
-      throw new RuntimeException("Problem with Kerberos auth_to_local name " +
-                                 "configuration", ioe);
-    }
-    isInitialized = true;
-    UserGroupInformation.conf = conf;
-    metrics = UgiInstrumentation.create(conf);
-  }
-
-  /**
-   * Set the static configuration for UGI.
-   * In particular, set the security authentication mechanism and the
-   * group look up service.
-   * @param conf the configuration to use
-   */
-  public static void setConfiguration(Configuration conf) {
-    initialize(conf);
-  }
-  
-  /**
-   * Determine if UserGroupInformation is using Kerberos to determine
-   * user identities or is relying on simple authentication
-   * 
-   * @return true if UGI is working in a secure environment
-   */
-  public static boolean isSecurityEnabled() {
-    ensureInitialized();
-    return useKerberos;
-  }
-  
-  /**
-   * Information about the logged in user.
-   */
-  private static UserGroupInformation loginUser = null;
-  private static String keytabPrincipal = null;
-  private static String keytabFile = null;
-
-  private final Subject subject;
-  // All non-static fields must be read-only caches that come from the subject.
-  private final User user;
-  private final boolean isKeytab;
-  private final boolean isKrbTkt;
-  
-  private static final String OS_LOGIN_MODULE_NAME;
-  private static final Class<? extends Principal> OS_PRINCIPAL_CLASS;
-  private static final boolean windows = 
-                           System.getProperty("os.name").startsWith("Windows");
-  private static Thread renewerThread = null;
-  private static volatile boolean shouldRunRenewerThread = true;
-  
-  static {
-    if (windows) {
-      OS_LOGIN_MODULE_NAME = "com.sun.security.auth.module.NTLoginModule";
-      OS_PRINCIPAL_CLASS = NTUserPrincipal.class;
-    } else {
-      OS_LOGIN_MODULE_NAME = "com.sun.security.auth.module.UnixLoginModule";
-      OS_PRINCIPAL_CLASS = UnixPrincipal.class;
-    }
-  }
-  
-  private static class RealUser implements Principal {
-    private final UserGroupInformation realUser;
-    
-    RealUser(UserGroupInformation realUser) {
-      this.realUser = realUser;
-    }
-    
-    public String getName() {
-      return realUser.getUserName();
-    }
-    
-    public UserGroupInformation getRealUser() {
-      return realUser;
-    }
-    
-    @Override
-    public boolean equals(Object o) {
-      if (this == o) {
-        return true;
-      } else if (o == null || getClass() != o.getClass()) {
-        return false;
-      } else {
-        return realUser.equals(((RealUser) o).realUser);
-      }
-    }
-    
-    @Override
-    public int hashCode() {
-      return realUser.hashCode();
-    }
-    
-    @Override
-    public String toString() {
-      return realUser.toString();
-    }
-  }
-  
-  /**
-   * A JAAS configuration that defines the login modules that we want
-   * to use for login.
-   */
-  private static class HadoopConfiguration 
-      extends javax.security.auth.login.Configuration {
-    private static final String SIMPLE_CONFIG_NAME = "hadoop-simple";
-    private static final String USER_KERBEROS_CONFIG_NAME = 
-      "hadoop-user-kerberos";
-    private static final String KEYTAB_KERBEROS_CONFIG_NAME = 
-      "hadoop-keytab-kerberos";
-    
-    private static final AppConfigurationEntry OS_SPECIFIC_LOGIN =
-      new AppConfigurationEntry(OS_LOGIN_MODULE_NAME,
-                                LoginModuleControlFlag.REQUIRED,
-                                new HashMap<String,String>());
-    private static final AppConfigurationEntry HADOOP_LOGIN =
-      new AppConfigurationEntry(HadoopLoginModule.class.getName(),
-                                LoginModuleControlFlag.REQUIRED,
-                                new HashMap<String,String>());
-    private static final Map<String,String> USER_KERBEROS_OPTIONS = 
-      new HashMap<String,String>();
-    static {
-      USER_KERBEROS_OPTIONS.put("doNotPrompt", "true");
-      USER_KERBEROS_OPTIONS.put("useTicketCache", "true");
-      USER_KERBEROS_OPTIONS.put("renewTGT", "true");
-      String ticketCache = System.getenv("KRB5CCNAME");
-      if (ticketCache != null) {
-        USER_KERBEROS_OPTIONS.put("ticketCache", ticketCache);
-      }
-    }
-    private static final AppConfigurationEntry USER_KERBEROS_LOGIN =
-      new AppConfigurationEntry(Krb5LoginModule.class.getName(),
-                                LoginModuleControlFlag.OPTIONAL,
-                                USER_KERBEROS_OPTIONS);
-    private static final Map<String,String> KEYTAB_KERBEROS_OPTIONS = 
-      new HashMap<String,String>();
-    static {
-      KEYTAB_KERBEROS_OPTIONS.put("doNotPrompt", "true");
-      KEYTAB_KERBEROS_OPTIONS.put("useKeyTab", "true");
-      KEYTAB_KERBEROS_OPTIONS.put("storeKey", "true");
-    }
-    private static final AppConfigurationEntry KEYTAB_KERBEROS_LOGIN =
-      new AppConfigurationEntry(Krb5LoginModule.class.getName(),
-                                LoginModuleControlFlag.REQUIRED,
-                                KEYTAB_KERBEROS_OPTIONS);
-    
-    private static final AppConfigurationEntry[] SIMPLE_CONF = 
-      new AppConfigurationEntry[]{OS_SPECIFIC_LOGIN, HADOOP_LOGIN};
-
-    private static final AppConfigurationEntry[] USER_KERBEROS_CONF =
-      new AppConfigurationEntry[]{OS_SPECIFIC_LOGIN, USER_KERBEROS_LOGIN,
-                                  HADOOP_LOGIN};
-
-    private static final AppConfigurationEntry[] KEYTAB_KERBEROS_CONF =
-      new AppConfigurationEntry[]{KEYTAB_KERBEROS_LOGIN, HADOOP_LOGIN};
-
-    @Override
-    public AppConfigurationEntry[] getAppConfigurationEntry(String appName) {
-      if (SIMPLE_CONFIG_NAME.equals(appName)) {
-        return SIMPLE_CONF;
-      } else if (USER_KERBEROS_CONFIG_NAME.equals(appName)) {
-        return USER_KERBEROS_CONF;
-      } else if (KEYTAB_KERBEROS_CONFIG_NAME.equals(appName)) {
-        KEYTAB_KERBEROS_OPTIONS.put("keyTab", keytabFile);
-        KEYTAB_KERBEROS_OPTIONS.put("principal", keytabPrincipal);
-        return KEYTAB_KERBEROS_CONF;
-      }
-      return null;
-    }
-  }
-  
-  private LoginContext getLogin() {
-    return user.getLogin();
-  }
-  
-  private void setLogin(LoginContext login) {
-    user.setLogin(login);
-  }
-
-  /**
-   * Create a UserGroupInformation for the given subject.
-   * This does not change the subject or acquire new credentials.
-   * @param subject the user's subject
-   */
-  UserGroupInformation(Subject subject) {
-    this.subject = subject;
-    this.user = subject.getPrincipals(User.class).iterator().next();
-    this.isKeytab = !subject.getPrivateCredentials(KerberosKey.class).isEmpty();
-    this.isKrbTkt = !subject.getPrivateCredentials(KerberosTicket.class).isEmpty();
-  }
-  
-  /**
-   * checks if logged in using kerberos
-   * @return true if the subject logged via keytab or has a Kerberos TGT
-   */
-  public boolean hasKerberosCredentials() {
-    return isKeytab || isKrbTkt;
-  }
-
-  /**
-   * Return the current user, including any doAs in the current stack.
-   * @return the current user
-   * @throws java.io.IOException if login fails
-   */
-  public static UserGroupInformation getCurrentUser() throws IOException {
-    AccessControlContext context = AccessController.getContext();
-    Subject subject = Subject.getSubject(context);
-    // As the Apache Karaf provides the Subject by default, we need to make sure hadoopcan get the User.class information first
-    if (subject != null && subject.getPrincipals(User.class).iterator().hasNext()) {
-        return new UserGroupInformation(subject);
-    }
-    return getLoginUser();
-  }
-
-  /**
-   * Get the currently logged in user.
-   * @return the logged in user
-   * @throws java.io.IOException if login fails
-   */
-  public synchronized 
-  static UserGroupInformation getLoginUser() throws IOException {
-    if (loginUser == null) {
-      try {
-        Subject subject = new Subject();
-        LoginContext login;
-        if (isSecurityEnabled()) {
-          login = new LoginContext(HadoopConfiguration.USER_KERBEROS_CONFIG_NAME, subject);
-        } else {
-          login = new LoginContext(HadoopConfiguration.SIMPLE_CONFIG_NAME, subject);
-        }
-        login.login();
-        loginUser = new UserGroupInformation(subject);
-        loginUser.setLogin(login);
-        loginUser.setAuthenticationMethod(isSecurityEnabled() ?
-                                          AuthenticationMethod.KERBEROS :
-                                          AuthenticationMethod.SIMPLE);
-        loginUser = new UserGroupInformation(login.getSubject());
-        String fileLocation = System.getenv(HADOOP_TOKEN_FILE_LOCATION);
-        if (fileLocation != null && isSecurityEnabled()) {
-          // load the token storage file and put all of the tokens into the
-          // user.
-          Credentials cred = Credentials.readTokenStorageFile(
-              new Path("file:///" + fileLocation), conf);
-          for (Token<?> token: cred.getAllTokens()) {
-            loginUser.addToken(token);
-          }
-        }
-        loginUser.spawnAutoRenewalThreadForUserCreds();
-      } catch (LoginException le) {
-        throw new IOException("failure to login", le);
-      }
-    }
-    return loginUser;
-  }
-
-  /**
-   * Is this user logged in from a keytab file?
-   * @return true if the credentials are from a keytab file.
-   */
-  public boolean isFromKeytab() {
-    return isKeytab;
-  }
-  
-  /**
-   * Get the Kerberos TGT
-   * @return the user's TGT or null if none was found
-   */
-  private synchronized KerberosTicket getTGT() {
-    Set<KerberosTicket> tickets = 
-      subject.getPrivateCredentials(KerberosTicket.class);
-    for(KerberosTicket ticket: tickets) {
-      KerberosPrincipal server = ticket.getServer();
-      if (server.getName().equals("krbtgt/" + server.getRealm() + 
-                                  "@" + server.getRealm())) {
-        if (LOG.isDebugEnabled()) {
-          LOG.debug("Found tgt " + ticket);
-        }
-        return ticket;
-      }
-    }
-    return null;
-  }
-  
-  private long getRefreshTime(KerberosTicket tgt) {
-    long start = tgt.getStartTime().getTime();
-    long end = tgt.getEndTime().getTime();
-    return start + (long) ((end - start) * TICKET_RENEW_WINDOW);
-  }
-
-  /**Spawn a thread to do periodic renewals of kerberos credentials*/
-  private void spawnAutoRenewalThreadForUserCreds() {
-    if (isSecurityEnabled()) {
-      //spawn thread only if we have kerb credentials
-      if (user.getAuthenticationMethod() == AuthenticationMethod.KERBEROS &&
-          !isKeytab) {
-        renewerThread = new Thread(new Runnable() {
-
-          public void run() {
-            String cmd = conf.get("hadoop.kerberos.kinit.command",
-                                  "/usr/kerberos/bin/kinit");
-            KerberosTicket tgt = getTGT();
-            if (tgt == null) {
-              return;
-            }
-            long nextRefresh = getRefreshTime(tgt);
-            while (shouldRunRenewerThread) {
-              try {
-                long now = System.currentTimeMillis();
-                LOG.debug("Current time is " + now);
-                LOG.debug("Next refresh is " + nextRefresh);
-                if (now < nextRefresh) {
-                  Thread.sleep(nextRefresh - now);
-                }
-                Shell.execCommand(cmd, "-R");
-                LOG.debug("renewed ticket");
-                reloginFromTicketCache();
-                tgt = getTGT();
-                if (tgt == null) {
-                  LOG.warn("No TGT after renewal. Aborting renew thread for " +
-                           getUserName());
-                  return;
-                }
-                nextRefresh = Math.max(getRefreshTime(tgt),
-                                       now + MIN_TIME_BEFORE_RELOGIN);
-              } catch (InterruptedException ie) {
-                LOG.warn("Terminating renewal thread");
-                return;
-              } catch (IOException ie) {
-                LOG.warn("Exception encountered while running the" +
-                    " renewal command." + ie + 
-                    ". Aborting renew thread for " + user);
-                return;
-              }
-            }
-            LOG.info("TGT renewer thread exiting.");
-          }
-        });
-        renewerThread.setDaemon(true);
-        renewerThread.setName("TGT Renewer for " + getUserName());
-        renewerThread.start();
-      }
-    }
-  }
-  /**
-   * Log a user in from a keytab file. Loads a user identity from a keytab
-   * file and logs them in. They become the currently logged-in user.
-   * @param user the principal name to load from the keytab
-   * @param path the path to the keytab file
-   * @throws java.io.IOException if the keytab file can't be read
-   */
-  public synchronized
-  static void loginUserFromKeytab(String user,
-                                  String path
-                                  ) throws IOException {
-    if (!isSecurityEnabled()) {
-      return;
-    }
-
-    keytabFile = path;
-    keytabPrincipal = user;
-    Subject subject = new Subject();
-    LoginContext login;   
-    long start = 0;
-    // The renewer thread might have been spawned earlier if getLoginUser
-    // was called with the loginUser as null. 
-    // Just kill the thread. BTW loginUser is not null anymore and any 
-    // future call to getLoginUser will not spawn the thread.
-    if (renewerThread != null) {
-      renewerThread.interrupt();
-      shouldRunRenewerThread = false;
-      renewerThread = null;
-      LOG.info("Asked the TGT renewer thread to terminate");
-    }
-    try {
-      login = 
-        new LoginContext(HadoopConfiguration.KEYTAB_KERBEROS_CONFIG_NAME, subject);
-      start = System.currentTimeMillis();
-      login.login();
-      metrics.addLoginSuccess(System.currentTimeMillis() - start);
-      loginUser = new UserGroupInformation(subject);
-      loginUser.setLogin(login);
-      loginUser.setAuthenticationMethod(AuthenticationMethod.KERBEROS);
-    } catch (LoginException le) {
-      if (start > 0) {
-        metrics.addLoginFailure(System.currentTimeMillis() - start);
-      }
-      throw new IOException("Login failure for " + user + " from keytab " + 
-                            path, le);
-    }
-    LOG.info("Login successful for user " + keytabPrincipal
-        + " using keytab file " + keytabFile);
-  }
-  /**
-   * Re-Login a user in from the ticket cache.  This
-   * method assumes that login had happened already.
-   * The Subject field of this UserGroupInformation object is updated to have
-   * the new credentials.
-   * @throws java.io.IOException on a failure
-   */
-  public synchronized void reloginFromTicketCache()
-  throws IOException {
-    if (!isSecurityEnabled() || 
-        user.getAuthenticationMethod() != AuthenticationMethod.KERBEROS ||
-        !isKrbTkt)
-      return;
-    LoginContext login = getLogin();
-    if (login == null) {
-      throw new IOException("login must be done first");
-    }
-    if (!hasSufficientTimeElapsed()) {
-      return;
-    }
-    try {
-      LOG.info("Initiating logout for " + getUserName());
-      //clear up the kerberos state. But the tokens are not cleared! As per 
-      //the Java kerberos login module code, only the kerberos credentials
-      //are cleared
-      login.logout();
-      //login and also update the subject field of this instance to 
-      //have the new credentials (pass it to the LoginContext constructor)
-      login = 
-        new LoginContext(HadoopConfiguration.USER_KERBEROS_CONFIG_NAME, 
-            getSubject());
-      LOG.info("Initiating re-login for " + getUserName());
-      login.login();
-      setLogin(login);
-    } catch (LoginException le) {
-      throw new IOException("Login failure for " + getUserName(), le);
-    } 
-  }
-
-
-  /**
-   * Log a user in from a keytab file. Loads a user identity from a keytab
-   * file and login them in. This new user does not affect the currently
-   * logged-in user.
-   * @param user the principal name to load from the keytab
-   * @param path the path to the keytab file
-   * @throws java.io.IOException if the keytab file can't be read
-   */
-  public synchronized
-  static UserGroupInformation loginUserFromKeytabAndReturnUGI(String user,
-                                  String path
-                                  ) throws IOException {
-    if (!isSecurityEnabled())
-      return UserGroupInformation.getCurrentUser();
-    String oldKeytabFile = null;
-    String oldKeytabPrincipal = null;
-
-    long start = 0;
-    try {
-      oldKeytabFile = keytabFile;
-      oldKeytabPrincipal = keytabPrincipal;
-      keytabFile = path;
-      keytabPrincipal = user;
-      Subject subject = new Subject();
-      
-      LoginContext login = 
-        new LoginContext(HadoopConfiguration.KEYTAB_KERBEROS_CONFIG_NAME, subject); 
-       
-      start = System.currentTimeMillis();
-      login.login();
-      metrics.addLoginSuccess(System.currentTimeMillis() - start);
-      UserGroupInformation newLoginUser = new UserGroupInformation(subject);
-      newLoginUser.setLogin(login);
-      newLoginUser.setAuthenticationMethod(AuthenticationMethod.KERBEROS);
-      
-      return newLoginUser;
-    } catch (LoginException le) {
-      if (start > 0) {
-        metrics.addLoginFailure(System.currentTimeMillis() - start);
-      }
-      throw new IOException("Login failure for " + user + " from keytab " + 
-                            path, le);
-    } finally {
-      if(oldKeytabFile != null) keytabFile = oldKeytabFile;
-      if(oldKeytabPrincipal != null) keytabPrincipal = oldKeytabPrincipal;
-    }
-  }
-
-  /**
-   * Re-login a user from keytab if TGT is expired or is close to expiry.
-   * 
-   * @throws java.io.IOException
-   */
-  public synchronized void checkTGTAndReloginFromKeytab() throws IOException {
-    //TODO: The method reloginFromKeytab should be refactored to use this
-    //      implementation.
-    if (!isSecurityEnabled()
-        || user.getAuthenticationMethod() != AuthenticationMethod.KERBEROS
-        || !isKeytab)
-      return;
-    KerberosTicket tgt = getTGT();
-    if (tgt != null && System.currentTimeMillis() < getRefreshTime(tgt)) {
-      return;
-    }
-    reloginFromKeytab();
-  }
-  
-  /**
-   * Re-Login a user in from a keytab file. Loads a user identity from a keytab
-   * file and logs them in. They become the currently logged-in user. This
-   * method assumes that {@link #loginUserFromKeytab(String, String)} had 
-   * happened already.
-   * The Subject field of this UserGroupInformation object is updated to have
-   * the new credentials.
-   * @throws java.io.IOException on a failure
-   */
-  public synchronized void reloginFromKeytab()
-  throws IOException {
-    if (!isSecurityEnabled() || 
-        user.getAuthenticationMethod() != AuthenticationMethod.KERBEROS ||
-        !isKeytab)
-      return;
-    LoginContext login = getLogin();
-    if (login == null || keytabFile == null) {
-      throw new IOException("loginUserFromKeyTab must be done first");
-    }
-    if (!hasSufficientTimeElapsed()) {
-      return;
-    }
-    long start = 0;
-    try {
-      LOG.info("Initiating logout for " + getUserName());
-      synchronized (UserGroupInformation.class) {
-        //clear up the kerberos state. But the tokens are not cleared! As per 
-        //the Java kerberos login module code, only the kerberos credentials
-        //are cleared
-        login.logout();
-        //login and also update the subject field of this instance to 
-        //have the new credentials (pass it to the LoginContext constructor)
-        login = 
-          new LoginContext(HadoopConfiguration.KEYTAB_KERBEROS_CONFIG_NAME, 
-                           getSubject());
-        LOG.info("Initiating re-login for " + keytabPrincipal);
-        start = System.currentTimeMillis();
-        login.login();
-        metrics.addLoginSuccess(System.currentTimeMillis() - start);
-        setLogin(login);
-      }
-    } catch (LoginException le) {
-      if (start > 0) {
-        metrics.addLoginFailure(System.currentTimeMillis() - start);
-      }
-      throw new IOException("Login failure for " + keytabPrincipal + 
-          " from keytab " + keytabFile, le);
-    } 
-  }
-
-  private boolean hasSufficientTimeElapsed() {
-    long now = System.currentTimeMillis();
-    if (now - user.getLastLogin() < MIN_TIME_BEFORE_RELOGIN ) {
-      LOG.warn("Not attempting to re-login since the last re-login was " +
-          "attempted less than " + (MIN_TIME_BEFORE_RELOGIN/1000) + " seconds"+
-          " before.");
-      return false;
-    }
-    // register most recent relogin attempt
-    user.setLastLogin(now);
-    return true;
-  }
-  
-  /**
-   * Did the login happen via keytab
-   * @return true or false
-   */
-  public synchronized static boolean isLoginKeytabBased() throws IOException {
-    return getLoginUser().isKeytab;
-  }
-
-  /**
-   * Create a user from a login name. It is intended to be used for remote
-   * users in RPC, since it won't have any credentials.
-   * @param user the full user principal name, must not be empty or null
-   * @return the UserGroupInformation for the remote user.
-   */
-  public static UserGroupInformation createRemoteUser(String user) {
-    if (user == null || "".equals(user)) {
-      throw new IllegalArgumentException("Null user");
-    }
-    Subject subject = new Subject();
-    subject.getPrincipals().add(new User(user));
-    UserGroupInformation result = new UserGroupInformation(subject);
-    result.setAuthenticationMethod(AuthenticationMethod.SIMPLE);
-    return result;
-  }
-
-  /**
-   * existing types of authentications' methods
-   */
-  public static enum AuthenticationMethod {
-    SIMPLE,
-    KERBEROS,
-    TOKEN,
-    CERTIFICATE,
-    KERBEROS_SSL,
-    PROXY;
-  }
-
-  /**
-   * Create a proxy user using username of the effective user and the ugi of the
-   * real user.
-   * @param user
-   * @param realUser
-   * @return proxyUser ugi
-   */
-  public static UserGroupInformation createProxyUser(String user,
-      UserGroupInformation realUser) {
-    if (user == null || "".equals(user)) {
-      throw new IllegalArgumentException("Null user");
-    }
-    if (realUser == null) {
-      throw new IllegalArgumentException("Null real user");
-    }
-    Subject subject = new Subject();
-    Set<Principal> principals = subject.getPrincipals();
-    principals.add(new User(user));
-    principals.add(new RealUser(realUser));
-    UserGroupInformation result =new UserGroupInformation(subject);
-    result.setAuthenticationMethod(AuthenticationMethod.PROXY);
-    return result;
-  }
-
-  /**
-   * get RealUser (vs. EffectiveUser)
-   * @return realUser running over proxy user
-   */
-  public UserGroupInformation getRealUser() {
-    for (RealUser p: subject.getPrincipals(RealUser.class)) {
-      return p.getRealUser();
-    }
-    return null;
-  }
-
-
-  
-  /**
-   * This class is used for storing the groups for testing. It stores a local
-   * map that has the translation of usernames to groups.
-   */
-  private static class TestingGroups extends Groups {
-    private final Map<String, List<String>> userToGroupsMapping = 
-      new HashMap<String,List<String>>();
-    
-    private TestingGroups() {
-      super(new org.apache.hadoop.conf.Configuration());
-    }
-    
-    @Override
-    public List<String> getGroups(String user) {
-      List<String> result = userToGroupsMapping.get(user);
-      if (result == null) {
-        result = new ArrayList<String>();
-      }
-      return result;
-    }
-
-    private void setUserGroups(String user, String[] groups) {
-      userToGroupsMapping.put(user, Arrays.asList(groups));
-    }
-  }
-
-  /**
-   * Create a UGI for testing HDFS and MapReduce
-   * @param user the full user principal name
-   * @param userGroups the names of the groups that the user belongs to
-   * @return a fake user for running unit tests
-   */
-  public static UserGroupInformation createUserForTesting(String user, 
-                                                          String[] userGroups) {
-    ensureInitialized();
-    UserGroupInformation ugi = createRemoteUser(user);
-    // make sure that the testing object is setup
-    if (!(groups instanceof TestingGroups)) {
-      groups = new TestingGroups();
-    }
-    // add the user groups
-    ((TestingGroups) groups).setUserGroups(ugi.getShortUserName(), userGroups);
-    return ugi;
-  }
-
-
-  /**
-   * Create a proxy user UGI for testing HDFS and MapReduce
-   * 
-   * @param user
-   *          the full user principal name for effective user
-   * @param realUser
-   *          UGI of the real user
-   * @param userGroups
-   *          the names of the groups that the user belongs to
-   * @return a fake user for running unit tests
-   */
-  public static UserGroupInformation createProxyUserForTesting(String user,
-      UserGroupInformation realUser, String[] userGroups) {
-    ensureInitialized();
-    UserGroupInformation ugi = createProxyUser(user, realUser);
-    // make sure that the testing object is setup
-    if (!(groups instanceof TestingGroups)) {
-      groups = new TestingGroups();
-    }
-    // add the user groups
-    ((TestingGroups) groups).setUserGroups(ugi.getShortUserName(), userGroups);
-    return ugi;
-  }
-  
-  /**
-   * Get the user's login name.
-   * @return the user's name up to the first '/' or '@'.
-   */
-  public String getShortUserName() {
-    for (User p: subject.getPrincipals(User.class)) {
-      return p.getShortName();
-    }
-    return null;
-  }
-
-  /**
-   * Get the user's full principal name.
-   * @return the user's full principal name.
-   */
-  public String getUserName() {
-    return user.getName();
-  }
-
-  /**
-   * Add a TokenIdentifier to this UGI. The TokenIdentifier has typically been
-   * authenticated by the RPC layer as belonging to the user represented by this
-   * UGI.
-   * 
-   * @param tokenId
-   *          tokenIdentifier to be added
-   * @return true on successful add of new tokenIdentifier
-   */
-  public synchronized boolean addTokenIdentifier(TokenIdentifier tokenId) {
-    return subject.getPublicCredentials().add(tokenId);
-  }
-
-  /**
-   * Get the set of TokenIdentifiers belonging to this UGI
-   * 
-   * @return the set of TokenIdentifiers belonging to this UGI
-   */
-  public synchronized Set<TokenIdentifier> getTokenIdentifiers() {
-    return subject.getPublicCredentials(TokenIdentifier.class);
-  }
-  
-  /**
-   * Add a token to this UGI
-   * 
-   * @param token Token to be added
-   * @return true on successful add of new token
-   */
-  public synchronized boolean addToken(Token<? extends TokenIdentifier> token) {
-    return subject.getPrivateCredentials().add(token);
-  }
-  
-  /**
-   * Obtain the collection of tokens associated with this user.
-   * 
-   * @return an unmodifiable collection of tokens associated with user
-   */
-  public synchronized 
-  Collection<Token<? extends TokenIdentifier>> getTokens() {
-    Set<Object> creds = subject.getPrivateCredentials();
-    List<Token<?>> result = new ArrayList<Token<?>>(creds.size());
-    for(Object o: creds) {
-      if (o instanceof Token<?>) {
-        result.add((Token<?>) o);
-      }
-    }
-    return Collections.unmodifiableList(result);
-  }
-
-  /**
-   * Get the group names for this user.
-   * @return the list of users with the primary group first. If the command
-   *    fails, it returns an empty list.
-   */
-  public synchronized String[] getGroupNames() {
-    ensureInitialized();
-    try {
-      List<String> result = groups.getGroups(getShortUserName());
-      return result.toArray(new String[result.size()]);
-    } catch (IOException ie) {
-      LOG.warn("No groups available for user " + getShortUserName());
-      return new String[0];
-    }
-  }
-  
-  /**
-   * Return the username.
-   */
-  @Override
-  public String toString() {
-    if (getRealUser() != null) {
-      return getUserName() + " via " +  getRealUser().toString();
-    } else {
-      return getUserName();
-    }
-  }
-
-  /**
-   * Sets the authentication method in the subject
-   * 
-   * @param authMethod
-   */
-  public synchronized 
-  void setAuthenticationMethod(AuthenticationMethod authMethod) {
-    user.setAuthenticationMethod(authMethod);
-  }
-
-  /**
-   * Get the authentication method from the subject
-   * 
-   * @return AuthenticationMethod in the subject, null if not present.
-   */
-  public synchronized AuthenticationMethod getAuthenticationMethod() {
-    return user.getAuthenticationMethod();
-  }
-
-  /**
-   * Compare the subjects to see if they are equal to each other.
-   */
-  @Override
-  public boolean equals(Object o) {
-    if (o == this) {
-      return true;
-    } else if (o == null || getClass() != o.getClass()) {
-      return false;
-    } else {
-      return subject == ((UserGroupInformation) o).subject;
-    }
-  }
-
-  /**
-   * Return the hash of the subject.
-   */
-  @Override
-  public int hashCode() {
-    return System.identityHashCode(subject);
-  }
-
-  /**
-   * Get the underlying subject from this ugi.
-   * @return the subject that represents this user.
-   */
-  protected Subject getSubject() {
-    return subject;
-  }
-
-  /**
-   * Run the given action as the user.
-   * @param <T> the return type of the run method
-   * @param action the method to execute
-   * @return the value from the run method
-   */
-  public <T> T doAs(PrivilegedAction<T> action) {
-    return Subject.doAs(subject, action);
-  }
-  
-  /**
-   * Run the given action as the user, potentially throwing an exception.
-   * @param <T> the return type of the run method
-   * @param action the method to execute
-   * @return the value from the run method
-   * @throws java.io.IOException if the action throws an IOException
-   * @throws Error if the action throws an Error
-   * @throws RuntimeException if the action throws a RuntimeException
-   * @throws InterruptedException if the action throws an InterruptedException
-   * @throws java.lang.reflect.UndeclaredThrowableException if the action throws something else
-   */
-  public <T> T doAs(PrivilegedExceptionAction<T> action
-                    ) throws IOException, InterruptedException {
-    try {
-      return Subject.doAs(subject, action);
-    } catch (PrivilegedActionException pae) {
-      Throwable cause = pae.getCause();
-      if (cause instanceof IOException) {
-        throw (IOException) cause;
-      } else if (cause instanceof Error) {
-        throw (Error) cause;
-      } else if (cause instanceof RuntimeException) {
-        throw (RuntimeException) cause;
-      } else if (cause instanceof InterruptedException) {
-        throw (InterruptedException) cause;
-      } else {
-        throw new UndeclaredThrowableException(pae,"Unknown exception in doAs");
-      }
-    }
-  }
-
-  private void print() throws IOException {
-    System.out.println("User: " + getUserName());
-    System.out.print("Group Ids: ");
-    System.out.println();
-    String[] groups = getGroupNames();
-    System.out.print("Groups: ");
-    for(int i=0; i < groups.length; i++) {
-      System.out.print(groups[i] + " ");
-    }
-    System.out.println();    
-  }
-
-  /**
-   * A test method to print out the current user's UGI.
-   * @param args if there are two arguments, read the user from the keytab
-   * and print it out.
-   * @throws Exception
-   */
-  public static void main(String [] args) throws Exception {
-  System.out.println("Getting UGI for current user");
-    UserGroupInformation ugi = getCurrentUser();
-    ugi.print();
-    System.out.println("UGI: " + ugi);
-    System.out.println("Auth method " + ugi.user.getAuthenticationMethod());
-    System.out.println("Keytab " + ugi.isKeytab);
-    System.out.println("============================================================");
-    
-    if (args.length == 2) {
-      System.out.println("Getting UGI from keytab....");
-      loginUserFromKeytab(args[0], args[1]);
-      getCurrentUser().print();
-      System.out.println("Keytab: " + ugi);
-      System.out.println("Auth method " + loginUser.user.getAuthenticationMethod());
-      System.out.println("Keytab " + loginUser.isKeytab);
-    }
-  }
-
-}
-

http://git-wip-us.apache.org/repos/asf/servicemix-bundles/blob/428046ec/hadoop-core-1.1.1/src/main/resources/OSGI-INF/bundle.info
----------------------------------------------------------------------
diff --git a/hadoop-core-1.1.1/src/main/resources/OSGI-INF/bundle.info b/hadoop-core-1.1.1/src/main/resources/OSGI-INF/bundle.info
deleted file mode 100644
index 9a4b558..0000000
--- a/hadoop-core-1.1.1/src/main/resources/OSGI-INF/bundle.info
+++ /dev/null
@@ -1,17 +0,0 @@
-\u001B[1mSYNOPSIS\u001B[0m
-    ${project.description}
-
-    Original Maven URL:
-        \u001B[33mmvn:${pkgGroupId}/${pkgArtifactId}/${pkgVersion}\u001B[0m
-
-\u001B[1mDESCRIPTION\u001B[0m
-    The Apache™ Hadoop™ project develops open-source software for reliable, scalable, distributed computing.
-
-    The Apache Hadoop software library is a framework that allows for the distributed processing of large data sets
-    across clusters of computers using a simple programming model. It is designed to scale up from single servers
-    to thousands of machines, each offering local computation and storage. Rather than rely on hardware to deliver
-    high-avaiability, the library itself is designed to detect and handle failures at the application layer, so
-    delivering a highly-availabile service on top of a cluster of computers, each of which may be prone to failures.
-
-\u001B[1mSEE ALSO\u001B[0m
-    \u001B[36mhttp://hadoop.apache.org/\u001B[0m