hadoop-common-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Steve Loughran (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HADOOP-12804) Read Proxy Password from Credential Providers in S3 FileSystem
Date Sun, 12 Jun 2016 11:24:21 GMT

    [ https://issues.apache.org/jira/browse/HADOOP-12804?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15326374#comment-15326374
] 

Steve Loughran commented on HADOOP-12804:
-----------------------------------------

actually, the proxy pass may be the same as some other enterprisey service logons, so pretty
sensitive. If this logging is taking place elsewhere, then the bug exists wherever the proxy
code went in.

> Read Proxy Password from Credential Providers in S3 FileSystem
> --------------------------------------------------------------
>
>                 Key: HADOOP-12804
>                 URL: https://issues.apache.org/jira/browse/HADOOP-12804
>             Project: Hadoop Common
>          Issue Type: Sub-task
>          Components: fs/s3
>            Reporter: Larry McCay
>            Assignee: Larry McCay
>            Priority: Minor
>         Attachments: HADOOP-12804-001.patch
>
>
> HADOOP-12548 added credential provider support for the AWS credentials to S3FileSystem.
This JIRA is for considering the use of the credential providers for the proxy password as
well.
> Instead of adding the proxy password to the config file directly and in clear text, we
could provision it in addition to the AWS credentials into a credential provider and keep
it out of clear text.
> In terms of usage, it could be added to the same credential store as the AWS credentials
or potentially to a more universally available path - since it is the same for everyone. This
would however require multiple providers to be configured in the provider.path property and
more open file permissions on the store itself.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org


Mime
View raw message