[jira] [Commented] (OOZIE-34) connProps should mask DB username and password when logging != DEBUG

["Harsh J (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/OOZIE-34?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13096717#comment-13096717 ] 

Harsh J commented on OOZIE-34:
------------------------------

The line of code at fault is at:

core/src/main/java/org/apache/oozie/service/JPAService.java:175

LOG.info("JPA configuration: {0}", spi.getConfiguration().getConnectionProperties());

Not sure how to make this mask automatically, but there is a message format string building kinda thing above a few lines of this that may be used?

> connProps should mask DB username and password when logging != DEBUG
> --------------------------------------------------------------------
>
>                 Key: OOZIE-34
>                 URL: https://issues.apache.org/jira/browse/OOZIE-34
>             Project: Oozie
>          Issue Type: Improvement
>            Reporter: Esteban Gutierrez
>
> Currently Oozie writes the DB user name and password in oozie.log when debugging level is set to INFO:
> 2011-08-29 12:25:17,547  INFO StoreService:525 - USER[-] GROUP[-] TOKEN[-] APP[-] JOB[-] ACTION[-] JPA configuration: DriverClassName=com.mysql.jdbc.Driver,Url=jdbc:mysql://localhost:3306/oozie,Username=dbuser,Password=dbpassword,MaxActive=10
> Oozie should be able to mask the DB user and password like this:
> 2011-08-29 12:25:17,547  INFO StoreService:525 - USER[-] GROUP[-] TOKEN[-] APP[-] JOB[-] ACTION[-] JPA configuration: DriverClassName=com.mysql.jdbc.Driver,Url=jdbc:mysql://localhost:3306/oozie,Username=*****,Password=****,MaxActive=10

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira