[jira] [Commented] (SOLR-2775) DataImportHandler jdbc password

["Des Lownds (Commented) (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/SOLR-2775?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13119428#comment-13119428 ] 

Des Lownds commented on SOLR-2775:
----------------------------------

dataimporthalder config:
{code}  <!-- data import handler -->
  <requestHandler name="/dataimport" class="org.apache.solr.handler.dataimport.DataImportHandler">
    <lst name="defaults">
      <str name="config">data-config.xml</str>
      <lst name="datasource">
         <str name="driver">${jdbc.readonly.driver}</str>
         <str name="url">jdbc:mysql://${jdbc.readonly.host}:${jdbc.readonly.port}/${jdbc.readonly.database}</str>
         <str name="user">${jdbc.readonly.user}</str>
         <str name="password">${jdbc.readonly.password}</str>
      </lst>
    </lst>
  </requestHandler>{code}

curl http://localhost:8066/solr/catalog/dataimport
{code}
<response><lst name="responseHeader"><int name="status">0</int><int name="QTime">0</int></lst><lst name="initArgs"><lst name="defaults"><str name="config">data-config.xml</str><lst name="datasource"><str name="driver">com.mysql.jdbc.Driver</str><str name="url">jdbc:mysql://localhost:3306/#REDACT#</str><str name="user">#REDACT#</str><str name="password">#REDACT#</str></lst></lst></lst><str name="status">idle</str><str name="importResponse"/><lst name="statusMessages"><str name="Total Requests made to DataSource">2125</str><str name="Total Rows Fetched">1965</str><str name="Total Documents Skipped">0</str><str name="Full Dump Started">2011-10-03 11:31:02</str><str name="">Indexing completed. Added/Updated: 236 documents. Deleted 0 documents.</str><str name="Committed">2011-10-03 11:31:35</str><str name="Optimized">2011-10-03 11:31:35</str><str name="Total Documents Processed">236</str><str name="Time taken ">0:0:32.932</str></lst><str name="WARNING">This response format is experimental.  It is likely to change in the future.</str></response>
{code}
log:
{code}     [java] INFO  SearchHandler - Adding  component:org.apache.solr.handler.component.StatsComponent@f786a3c
     [java] INFO  SearchHandler - Adding  debug component:org.apache.solr.handler.component.DebugComponent@2a869113
     [java] INFO  DataImportHandler - Processing configuration from solrconfig.xml: {config=data-config.xml,datasource={driver=com.mysql.jdbc.Driver,url=jdbc:mysql://localhost:3306/#REDACT#,user=#REDACT#,password=#REDACT#}}
     [java] INFO  DataImportHandler - Adding properties to datasource: {user=#REDACT#, password=#REDACT#, url=jdbc:mysql://localhost:3306/#REDACT#, driver=com.mysql.jdbc.Driver}
     [java] INFO  DataImporter - Data Configuration loaded successfully
{code}

                
> DataImportHandler jdbc password
> -------------------------------
>
>                 Key: SOLR-2775
>                 URL: https://issues.apache.org/jira/browse/SOLR-2775
>             Project: Solr
>          Issue Type: Bug
>          Components: contrib - DataImportHandler
>    Affects Versions: 4.0
>         Environment: All
>            Reporter: Des Lownds
>            Assignee: Shalin Shekhar Mangar
>            Priority: Minor
>             Fix For: 4.0
>
>
> The http response from dataimporthandler, as well as logging output exposes the jdbc password in plain text.  

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org