You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ambari.apache.org by "Florian Barca (JIRA)" <ji...@apache.org> on 2015/05/27 05:14:18 UTC
[jira] [Updated] (AMBARI-11403) [WinTP2] ServiceConfig should not
log password in plaintext
[ https://issues.apache.org/jira/browse/AMBARI-11403?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Florian Barca updated AMBARI-11403:
-----------------------------------
Attachment: AMBARI-11403.0.patch
Fixed logged string generation
> [WinTP2] ServiceConfig should not log password in plaintext
> -----------------------------------------------------------
>
> Key: AMBARI-11403
> URL: https://issues.apache.org/jira/browse/AMBARI-11403
> Project: Ambari
> Issue Type: Bug
> Components: ambari-agent, ambari-server
> Affects Versions: 2.1.0
> Reporter: Florian Barca
> Assignee: Florian Barca
> Fix For: 2.1.0
>
> Attachments: AMBARI-11403.0.patch
>
>
> We should not be logging password in plaintext.
> 2015-05-11 16:23:06,378 - ServiceConfig'AmbariMetricsCollector'
> {'username': 'hadoop', 'action': ['change_user'], 'password': 'password'}
> 2015-05-11 16:23:06,385 - ServiceConfig'ams_hbase_master'
> {'username': 'hadoop', 'action': ['change_user'], 'password': 'password'}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)