[jira] [Created] (AMBARI-26615) Passwords are kept in plaintext under stack-recommendation folders

["Sunil Ganatra (Jira)" <ji...@apache.org>]

Sunil Ganatra created AMBARI-26615:
--------------------------------------

             Summary: Passwords are kept in plaintext under stack-recommendation folders
                 Key: AMBARI-26615
                 URL: https://issues.apache.org/jira/browse/AMBARI-26615
             Project: Ambari
          Issue Type: Bug
          Components: ambari-server
    Affects Versions: 3.0.0
            Reporter: Sunil Ganatra


After cluster is created, when you are performing Add service from ambari it is writing passwords in plaintext in /var/run/ /var/run/ambari-server/stack-recommendations/** directories. 

 
{code:java}
# grep -r password /var/run/
/var/run/ambari-server/stack-recommendations/1/services.json:        "rangertagsync_user_password" : "password",
/var/run/ambari-server/stack-recommendations/1/services.json:        "ranger_admin_password" : "password",
/var/run/ambari-server/stack-recommendations/1/services.json:        "rangerusersync_user_password" : "password",
/var/run/ambari-server/stack-recommendations/1/services.json:        "admin_password" : "password",
/var/run/ambari-server/stack-recommendations/1/services.json:        "keyadmin_user_password" : "password", 
{code}



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ambari.apache.org
For additional commands, e-mail: issues-help@ambari.apache.org