Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id 2E177200BF5 for ; Fri, 2 Dec 2016 21:47:00 +0100 (CET) Received: by cust-asf.ponee.io (Postfix) id 2CC5B160B24; Fri, 2 Dec 2016 20:47:00 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id 72AB6160B08 for ; Fri, 2 Dec 2016 21:46:59 +0100 (CET) Received: (qmail 4229 invoked by uid 500); 2 Dec 2016 20:46:58 -0000 Mailing-List: contact issues-help@ambari.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@ambari.apache.org Delivered-To: mailing list issues@ambari.apache.org Received: (qmail 4196 invoked by uid 99); 2 Dec 2016 20:46:58 -0000 Received: from arcas.apache.org (HELO arcas) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 02 Dec 2016 20:46:58 +0000 Received: from arcas.apache.org (localhost [127.0.0.1]) by arcas (Postfix) with ESMTP id 7DF442C2A66 for ; Fri, 2 Dec 2016 20:46:58 +0000 (UTC) Date: Fri, 2 Dec 2016 20:46:58 +0000 (UTC) From: "Nahappan Somasundaram (JIRA)" To: issues@ambari.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Updated] (AMBARI-18888) Ambari-agent: Create configuration files with JCEKS information MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 archived-at: Fri, 02 Dec 2016 20:47:00 -0000 [ https://issues.apache.org/jira/browse/AMBARI-18888?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Nahappan Somasundaram updated AMBARI-18888: ------------------------------------------- Attachment: rb53747.patch > Ambari-agent: Create configuration files with JCEKS information > --------------------------------------------------------------- > > Key: AMBARI-18888 > URL: https://issues.apache.org/jira/browse/AMBARI-18888 > Project: Ambari > Issue Type: Task > Components: ambari-agent > Reporter: Nahappan Somasundaram > Assignee: Nahappan Somasundaram > Attachments: rb53747.patch > > > When a non-status command is received, a command.json file is generated. This file contains the passwords used in a configuration. When the command is then executed, ambari agent spawns off a subprocess to execute component-specific Python scripts to generate the configuration files using the data from the command.json file. > To avoid storing clear text passwords in command.json file and configuration files, ambari-agent will first generate the JCEKS files corresponding to the configuration information in the command JSON blob coming from the server and then generate the command.json with the path to the JCEKS store instead of clear text passwords for *password* properties. > Subsequently when executing a command, ambari-agent will generate the configuration files with the JCEKS path information from command.json. -- This message was sent by Atlassian JIRA (v6.3.4#6332)