Mailing-List: contact dev-help@falcon.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@falcon.apache.org
Date: Mon, 28 Dec 2015 13:30:49 +0000 (UTC)
From: "Ajay Yadava (JIRA)" <jira@apache.org>
To: dev@falcon.incubator.apache.org
Message-ID: <JIRA.12912465.1447333618000.15468.1451309449594@Atlassian.JIRA>
In-Reply-To: <JIRA.12912465.1447333618000@Atlassian.JIRA>
References: <JIRA.12912465.1447333618000@Atlassian.JIRA>
 <JIRA.12912465.1447333618051@arcas>
Subject: [jira] [Commented] (FALCON-1601) Make Falcon StateStore more secure
 by not disclosing imp params in startup.props
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


    [ https://issues.apache.org/jira/browse/FALCON-1601?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15072720#comment-15072720 ] 

Ajay Yadava commented on FALCON-1601:
-------------------------------------

Since storing credentials in plain text is a security risk and bad practice, we shouldn't allow it unless there is a really strong use case for it. Do you have a strong use case where users will want to put credentials in startup.properties file despite being insecure?

> Make Falcon StateStore more secure by not disclosing imp params in startup.props 
> ---------------------------------------------------------------------------------
>
>                 Key: FALCON-1601
>                 URL: https://issues.apache.org/jira/browse/FALCON-1601
>             Project: Falcon
>          Issue Type: Improvement
>            Reporter: pavan kumar kolamuri
>            Assignee: pavan kumar kolamuri
>         Attachments: FALCON-1601.patch
>
>
> We are bringing Falcon state Store DB for Native Scheduler as part of https://issues.apache.org/jira/browse/FALCON-1234, We need to add more secureness by removing password properties from startup props and also made this Statestore supports Mysql as well.


--
This message was sent by Atlassian JIRA
(v6.3.4#6332)