Return-Path: 
 <dev-return-70651-apmail-ambari-dev-archive=ambari.apache.org@ambari.apache.org>
X-Original-To: apmail-ambari-dev-archive@www.apache.org
Delivered-To: apmail-ambari-dev-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id 3233D10724
	for <apmail-ambari-dev-archive@www.apache.org>;
 Sat,  9 May 2015 23:58:00 +0000 (UTC)
Received: (qmail 19366 invoked by uid 500); 9 May 2015 23:57:59 -0000
Delivered-To: apmail-ambari-dev-archive@ambari.apache.org
Received: (qmail 19333 invoked by uid 500); 9 May 2015 23:57:59 -0000
Mailing-List: contact dev-help@ambari.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:dev-help@ambari.apache.org>
List-Unsubscribe: <mailto:dev-unsubscribe@ambari.apache.org>
List-Post: <mailto:dev@ambari.apache.org>
List-Id: <dev.ambari.apache.org>
Reply-To: dev@ambari.apache.org
Delivered-To: mailing list dev@ambari.apache.org
Received: (qmail 19321 invoked by uid 99); 9 May 2015 23:57:59 -0000
Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28)
    by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 09 May 2015 23:57:59 +0000
Date: Sat, 9 May 2015 23:57:59 +0000 (UTC)
From: "Gabor Liptak (JIRA)" <jira@apache.org>
To: dev@ambari.apache.org
Message-ID: <JIRA.12828093.1431026698000.67180.1431215879716@Atlassian.JIRA>
In-Reply-To: <JIRA.12828093.1431026698000@Atlassian.JIRA>
References: <JIRA.12828093.1431026698000@Atlassian.JIRA>
 <JIRA.12828093.1431026698205@arcas>
Subject: [jira] [Updated] (AMBARI-11004) HBase&Hive services display
 passwords in plain text in Ambari 2.1
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394


     [ https://issues.apache.org/jira/browse/AMBARI-11004?page=3Dcom.atlass=
ian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Gabor Liptak updated AMBARI-11004:
----------------------------------
    Attachment: AMBARI-11004.patch

> HBase&Hive services display passwords in plain text in Ambari 2.1
> -----------------------------------------------------------------
>
>                 Key: AMBARI-11004
>                 URL: https://issues.apache.org/jira/browse/AMBARI-11004
>             Project: Ambari
>          Issue Type: Bug
>          Components: security
>         Environment: ambari-server-2.1.0-398
> hadoop_2_3_0_0_1897-hdfs-2.7.1.2.3.0.0-1897
>            Reporter: Irina Easterling
>         Attachments: AMBARI-11004.patch, Ambari2.1_HiveService_PasswordPl=
ainText.PNG
>
>
> HBase&Hive services display passwords in plain text in Ambari 2.1
> Step to reproduce:
> 1. Login to the Ambari web interface, http://<MASTER1>:8081
> 2. Select Hive or HBase service from Dashboard
> 3. Select Configs tab
> 4. Select 'Advanced ranger-hive-plugin-properties'=20
> 5. View the following fields where password in plain text:
> =E2=80=98Ranger repository config password=E2=80=99
> =E2=80=98SSL_KEYSTORE_PASSWORD=E2=80=99
> =E2=80=98SSL_TRUSTSTORE_PASSWORD=E2=80=99



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)