[jira] [Created] (AMBARI-11004) HBase&Hive services display passwords in plain text in Ambari 2.1

["Irina Easterling (JIRA)" <ji...@apache.org>]

Irina Easterling created AMBARI-11004:
-----------------------------------------

             Summary: HBase&Hive services display passwords in plain text in Ambari 2.1
                 Key: AMBARI-11004
                 URL: https://issues.apache.org/jira/browse/AMBARI-11004
             Project: Ambari
          Issue Type: Bug
          Components: security
         Environment: ambari-server-2.1.0-398
hadoop_2_3_0_0_1897-hdfs-2.7.1.2.3.0.0-1897

            Reporter: Irina Easterling




HBase&Hive services display passwords in plain text in Ambari 2.1

Step to reproduce:
1. Login to the Ambari web interface, http://<MASTER1>:8081
2. Select Hive or HBase service from Dashboard
3. Select Configs tab
4. Select 'Advanced ranger-hive-plugin-properties' 
5. View the following fields where password in plain text:
‘Ranger repository config password’
‘SSL_KEYSTORE_PASSWORD’
‘SSL_TRUSTSTORE_PASSWORD’



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)