ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Gabor Liptak (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (AMBARI-11004) HBase&Hive services display passwords in plain text in Ambari 2.1
Date Sun, 10 May 2015 13:35:00 GMT

    [ https://issues.apache.org/jira/browse/AMBARI-11004?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14537171#comment-14537171
] 

Gabor Liptak commented on AMBARI-11004:
---------------------------------------

Regen patch without "--no-prefix"

> HBase&Hive services display passwords in plain text in Ambari 2.1
> -----------------------------------------------------------------
>
>                 Key: AMBARI-11004
>                 URL: https://issues.apache.org/jira/browse/AMBARI-11004
>             Project: Ambari
>          Issue Type: Bug
>          Components: security
>         Environment: ambari-server-2.1.0-398
> hadoop_2_3_0_0_1897-hdfs-2.7.1.2.3.0.0-1897
>            Reporter: Irina Easterling
>         Attachments: AMBARI-11004.1.patch, AMBARI-11004.patch, Ambari2.1_HiveService_PasswordPlainText.PNG
>
>
> HBase&Hive services display passwords in plain text in Ambari 2.1
> Step to reproduce:
> 1. Login to the Ambari web interface, http://<MASTER1>:8081
> 2. Select Hive or HBase service from Dashboard
> 3. Select Configs tab
> 4. Select 'Advanced ranger-hive-plugin-properties' 
> 5. View the following fields where password in plain text:
> ‘Ranger repository config password’
> ‘SSL_KEYSTORE_PASSWORD’
> ‘SSL_TRUSTSTORE_PASSWORD’



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message