Check if Kerberos config exists and is readable

trinodb · Dec 2, 2021 · b56ace1 · b56ace1
1 parent 6ce2460
commit b56ace1
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/...t/trino-client/src/main/java/io/trino/client/auth/kerberos/LoginBasedSubjectProvider.java b/...t/trino-client/src/main/java/io/trino/client/auth/kerberos/LoginBasedSubjectProvider.java
@@ -61,6 +61,11 @@ public LoginBasedSubjectProvider(
                     "Refusing to set system property 'java.security.krb5.conf' to '%s', it is already set to '%s'",
                     newValue,
                     currentValue);
+            checkState(
+                    file.exists() && !file.isDirectory(),
+                    "Kerberos config file '%s' does not exist or is a directory",
+                    newValue);
+            checkState(file.canRead(), "Kerberos config file '%s' is not readable", newValue);
             System.setProperty("java.security.krb5.conf", newValue);
         });
     }