Mailing-List: contact issues-help@hbase.apache.org; run by ezmlm
Precedence: bulk
Date: Thu, 28 Aug 2014 23:01:09 +0000 (UTC)
From: "Larry McCay (JIRA)" <jira@apache.org>
To: issues@hbase.apache.org
Message-ID: <JIRA.12736225.1408757420984.5041.1409266869379@arcas>
In-Reply-To: <JIRA.12736225.1408757420984@arcas>
References: <JIRA.12736225.1408757420984@arcas>
Subject: [jira] [Updated] (HBASE-11810) Access SSL Passwords through
 Credential Provider API
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


     [ https://issues.apache.org/jira/browse/HBASE-11810?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Larry McCay updated HBASE-11810:
--------------------------------

    Status: Open  (was: Patch Available)

> Access SSL Passwords through Credential Provider API
> ----------------------------------------------------
>
>                 Key: HBASE-11810
>                 URL: https://issues.apache.org/jira/browse/HBASE-11810
>             Project: HBase
>          Issue Type: Improvement
>          Components: security
>            Reporter: Larry McCay
>            Assignee: Larry McCay
>         Attachments: HBASE_11810.patch
>
>
> HADOOP-10607 introduced the credential provider API for allowing passwords and other sensitive configuration items to be stored in an external provider.
> RESTServer is accessing passwords stored in clear text in Configuration through the standard get() method. By using the new Configuration.getPassword method instead, the credential provider API will be checked first then fall back to clear text - when allowed.


--
This message was sent by Atlassian JIRA
(v6.2#6252)