github/sql-server-samples
1
0
Fork 0
mirror of https://github.com/Microsoft/sql-server-samples.git synced 2025-12-08 14:58:54 +00:00
Code Issues Releases Wiki Activity

Turn off reverse DNS lookup

Browse Source
This commit is contained in:
Saurabh Singh (SQL)
2020-11-17 09:57:06 -08:00
parent 7caf95731b
commit 6bb293d004
1 changed files with 26 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
samples/features/sql-big-data-cluster/connectivity/webhdfs-java-client/src/main/java/com/microsoft/mssql/App.java
+26 -4
View File
@@ -3,20 +3,28 @@
*/ */
package com.microsoft.mssql; package com.microsoft.mssql;
import java.security.Principal;
import java.io.File; import java.io.File;
import java.security.Principal;
import org.apache.http.HttpEntity; import org.apache.http.HttpEntity;
import org.apache.http.auth.AuthSchemeProvider;
import org.apache.http.auth.AuthScope; import org.apache.http.auth.AuthScope;
import org.apache.http.auth.Credentials; import org.apache.http.auth.Credentials;
import org.apache.http.client.CredentialsProvider; import org.apache.http.client.CredentialsProvider;
import org.apache.http.client.config.AuthSchemes;
import org.apache.http.client.methods.CloseableHttpResponse; import org.apache.http.client.methods.CloseableHttpResponse;
import org.apache.http.client.methods.HttpGet;
import org.apache.http.client.methods.HttpPut; import org.apache.http.client.methods.HttpPut;
import org.apache.http.client.methods.HttpUriRequest; import org.apache.http.client.methods.HttpUriRequest;
import org.apache.http.client.methods.RequestBuilder; import org.apache.http.client.methods.RequestBuilder;
import org.apache.http.impl.client.CloseableHttpClient; import org.apache.http.config.Registry;
import org.apache.http.config.RegistryBuilder;
import org.apache.http.entity.mime.MultipartEntityBuilder; import org.apache.http.entity.mime.MultipartEntityBuilder;
import org.apache.http.impl.auth.BasicSchemeFactory;
import org.apache.http.impl.auth.DigestSchemeFactory;
import org.apache.http.impl.auth.KerberosSchemeFactory;
import org.apache.http.impl.auth.NTLMSchemeFactory;
import org.apache.http.impl.auth.SPNegoSchemeFactory;
import org.apache.http.impl.client.CloseableHttpClient;
import org.apache.http.impl.client.HttpClients; import org.apache.http.impl.client.HttpClients;
import org.apache.http.util.EntityUtils; import org.apache.http.util.EntityUtils;
@@ -65,9 +73,23 @@ public class App {
private static void uploadResource(String inputFilePath, String outputFilePath){ private static void uploadResource(String inputFilePath, String outputFilePath){
System.out.println("Entering create resource"); System.out.println("Entering create resource");
// Create a custom auth scheme registry to prevent reverse DNS lookup on the Http Endpoints
// For BDC, the same IP address can be associated with multiple service endpoints. Hence control.aris.local and knox.aris.local
// can resolve to the same IP during reverse lookup. As a result of this kerberos auth may fail.
// To fix the problem, we should prevent reverse lookup by turning off Hostname Canonicalization in HTTP client and
// recommend that the user use the FQDN of knox endpoint to connect to knox.
Registry<AuthSchemeProvider> authSchemeRegistryCopy = RegistryBuilder.<AuthSchemeProvider>create()
.register(AuthSchemes.BASIC, new BasicSchemeFactory())
.register(AuthSchemes.DIGEST, new DigestSchemeFactory())
.register(AuthSchemes.NTLM, new NTLMSchemeFactory())
.register(AuthSchemes.SPNEGO, new SPNegoSchemeFactory(true, false))
.register(AuthSchemes.KERBEROS, new KerberosSchemeFactory(true, false))
.build();
// Construct Knox endpoint // Construct Knox endpoint
String createOperationEndpoint = GW_ENDPOINT + outputFilePath + "?op=CREATE&overwrite=true"; String createOperationEndpoint = GW_ENDPOINT + outputFilePath + "?op=CREATE&overwrite=true";
try (CloseableHttpClient client2 = HttpClients.custom().setDefaultCredentialsProvider(provider).build()) { try (CloseableHttpClient client2 = HttpClients.custom().setDefaultCredentialsProvider(provider).setDefaultAuthSchemeRegistry(authSchemeRegistryCopy).build()) {
HttpUriRequest request = new HttpPut(createOperationEndpoint); HttpUriRequest request = new HttpPut(createOperationEndpoint);
// First request to get the location in data nodes // First request to get the location in data nodes
try (CloseableHttpResponse response = client2.execute(request)) { try (CloseableHttpResponse response = client2.execute(request)) {