You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@knox.apache.org by Dilli Arumugam <da...@hortonworks.com> on 2014/02/08 00:02:34 UTC

can we see the value of alias with knoxcli.sh

Added an alias with the command

bin/knoxcli.sh  create-alias ldcfpass --cluster preauth --value hadoop

Now I want to get the value of the alias just added ldcfpass using
knoxcli.sh.

Is it possible to see the value of an alias with knoxcli?

Thanks
Dilli

-- 
CONFIDENTIALITY NOTICE
NOTICE: This message is intended for the use of the individual or entity to 
which it is addressed and may contain information that is confidential, 
privileged and exempt from disclosure under applicable law. If the reader 
of this message is not the intended recipient, you are hereby notified that 
any printing, copying, dissemination, distribution, disclosure or 
forwarding of this communication is strictly prohibited. If you have 
received this communication in error, please contact the sender immediately 
and delete it from your system. Thank You.

Re: can we see the value of alias with knoxcli.sh

Posted by larry mccay <la...@gmail.com>.
Don't agree.
If you don't know a password required to access a system then you can
change Knox to not work with it but you can't harvest the password and
access the system.

You are given access to Knox administration not necessarily to others.
On Feb 7, 2014 7:19 PM, "Dilli Arumugam" <da...@hortonworks.com> wrote:

> A person logged into the box  can
>
>    1. can set the value,
>    2. can update the value? (not sure of the answer for this, please
>    confirm)
>    3. can delete the value
>    4. list all the alias names and delete the values of all the aliases one
>    by one
>    5. but can not get the value for an alias
>
> Not sure whether this adds to security.
>
> But, this would be a negative for troubleshooting and support.
> Thanks
> Dilli
>
>
>
> On Fri, Feb 7, 2014 at 4:11 PM, larry mccay <la...@gmail.com> wrote:
>
> > No, I purposely did not provide that capability.
> > I am reluctant to provide a tool for harvesting passwords even though you
> > can change it when you have proper permissions.
> >
> >
> >
> > On Fri, Feb 7, 2014 at 6:02 PM, Dilli Arumugam <
> darumugam@hortonworks.com
> > >wrote:
> >
> > > Added an alias with the command
> > >
> > > bin/knoxcli.sh  create-alias ldcfpass --cluster preauth --value hadoop
> > >
> > > Now I want to get the value of the alias just added ldcfpass using
> > > knoxcli.sh.
> > >
> > > Is it possible to see the value of an alias with knoxcli?
> > >
> > > Thanks
> > > Dilli
> > >
> > > --
> > > CONFIDENTIALITY NOTICE
> > > NOTICE: This message is intended for the use of the individual or
> entity
> > to
> > > which it is addressed and may contain information that is confidential,
> > > privileged and exempt from disclosure under applicable law. If the
> reader
> > > of this message is not the intended recipient, you are hereby notified
> > that
> > > any printing, copying, dissemination, distribution, disclosure or
> > > forwarding of this communication is strictly prohibited. If you have
> > > received this communication in error, please contact the sender
> > immediately
> > > and delete it from your system. Thank You.
> > >
> >
>
> --
> CONFIDENTIALITY NOTICE
> NOTICE: This message is intended for the use of the individual or entity to
> which it is addressed and may contain information that is confidential,
> privileged and exempt from disclosure under applicable law. If the reader
> of this message is not the intended recipient, you are hereby notified that
> any printing, copying, dissemination, distribution, disclosure or
> forwarding of this communication is strictly prohibited. If you have
> received this communication in error, please contact the sender immediately
> and delete it from your system. Thank You.
>

Re: can we see the value of alias with knoxcli.sh

Posted by Dilli Arumugam <da...@hortonworks.com>.
A person logged into the box  can

   1. can set the value,
   2. can update the value? (not sure of the answer for this, please
   confirm)
   3. can delete the value
   4. list all the alias names and delete the values of all the aliases one
   by one
   5. but can not get the value for an alias

Not sure whether this adds to security.

But, this would be a negative for troubleshooting and support.
Thanks
Dilli



On Fri, Feb 7, 2014 at 4:11 PM, larry mccay <la...@gmail.com> wrote:

> No, I purposely did not provide that capability.
> I am reluctant to provide a tool for harvesting passwords even though you
> can change it when you have proper permissions.
>
>
>
> On Fri, Feb 7, 2014 at 6:02 PM, Dilli Arumugam <darumugam@hortonworks.com
> >wrote:
>
> > Added an alias with the command
> >
> > bin/knoxcli.sh  create-alias ldcfpass --cluster preauth --value hadoop
> >
> > Now I want to get the value of the alias just added ldcfpass using
> > knoxcli.sh.
> >
> > Is it possible to see the value of an alias with knoxcli?
> >
> > Thanks
> > Dilli
> >
> > --
> > CONFIDENTIALITY NOTICE
> > NOTICE: This message is intended for the use of the individual or entity
> to
> > which it is addressed and may contain information that is confidential,
> > privileged and exempt from disclosure under applicable law. If the reader
> > of this message is not the intended recipient, you are hereby notified
> that
> > any printing, copying, dissemination, distribution, disclosure or
> > forwarding of this communication is strictly prohibited. If you have
> > received this communication in error, please contact the sender
> immediately
> > and delete it from your system. Thank You.
> >
>

-- 
CONFIDENTIALITY NOTICE
NOTICE: This message is intended for the use of the individual or entity to 
which it is addressed and may contain information that is confidential, 
privileged and exempt from disclosure under applicable law. If the reader 
of this message is not the intended recipient, you are hereby notified that 
any printing, copying, dissemination, distribution, disclosure or 
forwarding of this communication is strictly prohibited. If you have 
received this communication in error, please contact the sender immediately 
and delete it from your system. Thank You.

Re: can we see the value of alias with knoxcli.sh

Posted by larry mccay <la...@gmail.com>.
No, I purposely did not provide that capability.
I am reluctant to provide a tool for harvesting passwords even though you
can change it when you have proper permissions.



On Fri, Feb 7, 2014 at 6:02 PM, Dilli Arumugam <da...@hortonworks.com>wrote:

> Added an alias with the command
>
> bin/knoxcli.sh  create-alias ldcfpass --cluster preauth --value hadoop
>
> Now I want to get the value of the alias just added ldcfpass using
> knoxcli.sh.
>
> Is it possible to see the value of an alias with knoxcli?
>
> Thanks
> Dilli
>
> --
> CONFIDENTIALITY NOTICE
> NOTICE: This message is intended for the use of the individual or entity to
> which it is addressed and may contain information that is confidential,
> privileged and exempt from disclosure under applicable law. If the reader
> of this message is not the intended recipient, you are hereby notified that
> any printing, copying, dissemination, distribution, disclosure or
> forwarding of this communication is strictly prohibited. If you have
> received this communication in error, please contact the sender immediately
> and delete it from your system. Thank You.
>