ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hudson (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (AMBARI-9480) Ranger password properties are incorrectly included in Blueprint export
Date Sat, 07 Feb 2015 00:28:34 GMT

    [ https://issues.apache.org/jira/browse/AMBARI-9480?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14310291#comment-14310291
] 

Hudson commented on AMBARI-9480:
--------------------------------

SUCCESS: Integrated in Ambari-trunk-Commit #1711 (See [https://builds.apache.org/job/Ambari-trunk-Commit/1711/])
Revert "AMBARI-9480. Ranger password properties are incorrectly included in Blueprint export.
(rnettleton)" (yusaku: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=bdee006b55527a94a8240e218e3fba1e807c384e)
* ambari-server/src/main/resources/stacks/HDP/2.2/services/HIVE/configuration/ranger-hive-plugin-properties.xml
* ambari-server/src/main/resources/stacks/HDP/2.2/services/HDFS/configuration/ranger-hdfs-plugin-properties.xml
* ambari-server/src/main/resources/stacks/HDP/2.2/services/STORM/configuration/ranger-storm-plugin-properties.xml
* ambari-server/src/main/resources/stacks/HDP/2.2/services/HBASE/configuration/ranger-hbase-plugin-properties.xml
* ambari-server/src/main/resources/common-services/KNOX/0.5.0.2.2/configuration/ranger-knox-plugin-properties.xml


> Ranger password properties are incorrectly included in Blueprint export
> -----------------------------------------------------------------------
>
>                 Key: AMBARI-9480
>                 URL: https://issues.apache.org/jira/browse/AMBARI-9480
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-server
>    Affects Versions: 2.0.0
>            Reporter: Robert Nettleton
>            Assignee: Robert Nettleton
>             Fix For: 2.0.0
>
>         Attachments: AMBARI-9480.patch.2
>
>
> Some new security configuration properties related to Ranger have been added to the stack
definitions.  Some of these properties are actually password configuration properties, but
are not currently marked as such in the metadata.  
> This causes exporting a Blueprint from a running cluster to include this password information
in the exported Blueprint.
> Some of the Ranger-related password properties found across the stack are:
> REPOSITORY_CONFIG_PASSWORD
> SSL_TRUSTSTORE_PASSWORD 
> SSL_KEYSTORE_PASSWORD
> The Ambari stack definitions need to be updated, such that these properties are marked
as being of propert-type "PASSWORD".  This will allow the Blueprint configuration processor
to determine that these are indeed password properties, and should not be included in an exported
Blueprint. 
> I'm working on a fix for this, and will be submitting a patch shortly.  



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message