[jira] [Updated] (OOZIE-2771) Allow retrieving keystore and truststore passwords from Hadoop Credential Provider

["Satish Subhashrao Saley (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/OOZIE-2771?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Satish Subhashrao Saley updated OOZIE-2771:
-------------------------------------------

Cherry-picked from master to branch-4.3.


> Allow retrieving keystore and truststore passwords from Hadoop Credential Provider
> ----------------------------------------------------------------------------------
>
>                 Key: OOZIE-2771
>                 URL: https://issues.apache.org/jira/browse/OOZIE-2771
>             Project: Oozie
>          Issue Type: Improvement
>            Reporter: Attila Sasvari
>            Assignee: Attila Sasvari
>             Fix For: 5.0.0b1, 4.3.1
>
>         Attachments: OOZIE-2771-01.patch
>
>
> Right now passwords for keystore and truststore ({{oozie.https.keystore.pass}}, {{oozie.https.truststore.pass}}) are stored in {{oozie-site.xml}} as cleartext.
> However, Oozie could take advantage of the Hadoop Credential Provider for storing and retrieving that passwords similarly how the JDBC password ({{oozie.service.JPAService.jdbc.password}}) is handled today (see https://issues.apache.org/jira/browse/OOZIE-2272).
> This way keystore and truststore passwords could be masked in oozie-site.
> Note: {{ConfigurationService.getPassword}} is worth to look at.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)