[jira] [Commented] (OOZIE-2853) Printing out Sqoop Configuration Properties may reveal passwords

["Robert Kanter (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/OOZIE-2853?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15953815#comment-15953815 ] 

Robert Kanter commented on OOZIE-2853:
--------------------------------------

Instead of doing this piecemeal (see OOZIE-2779, OOZIE-2803, etc) per action, could we repurpose this JIRA to mask passwords from all action types?

> Printing out Sqoop Configuration Properties may reveal passwords
> ----------------------------------------------------------------
>
>                 Key: OOZIE-2853
>                 URL: https://issues.apache.org/jira/browse/OOZIE-2853
>             Project: Oozie
>          Issue Type: Bug
>            Reporter: Attila Sasvari
>
> Sample from Oozie launcher's log:
> {code}
> Sqoop Configuration Properties:
> ------------------------
> ...
> oozie.sqoop.args.5=--password
> oozie.sqoop.args.6=examplPassword
> {code}
> [SqoopMain|https://github.com/apache/oozie/blob/branch-4.3/sharelib/sqoop/src/main/java/org/apache/oozie/action/hadoop/SqoopMain.java#L156] prints out hadoop configuration that may contain sensitive information.
> Note: Sqoop command arguments are redacted.
> {code}
> Sqoop command arguments :
> ...
>              --password
>              ********
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)