[jira] [Commented] (NIFI-5270) my ftp password is "${password}" so nifi's LISTFtp won't use it.

["Andy LoPresto (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/NIFI-5270?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16508486#comment-16508486 ] 

Andy LoPresto commented on NIFI-5270:
-------------------------------------

Hi Eric,

There has been some on-going discussion of this (pre-dating the NiFi Registry effort) and how it would relate to the Variable Registry. The effort has been paused a bit while other priorities have come up. 

I think the last discussion I recall had landed on "password guidance should explicitly prohibit literal passwords of the format {{'${xxx}'}}" as this was backward compatible with the existing {{PropertyDescriptor}} definitions and did not require additional work. Now may be a good time to re-evaluate that decision and perform new work for a future release. 

https://issues.apache.org/jira/browse/NIFI-2653
https://issues.apache.org/jira/browse/NIFI-3046
https://issues.apache.org/jira/browse/NIFI-3110
https://issues.apache.org/jira/browse/NIFI-3311
https://issues.apache.org/jira/browse/NIFI-3439
https://issues.apache.org/jira/browse/NIFI-4557

> my ftp password is "${password}" so nifi's LISTFtp won't use it.
> ----------------------------------------------------------------
>
>                 Key: NIFI-5270
>                 URL: https://issues.apache.org/jira/browse/NIFI-5270
>             Project: Apache NiFi
>          Issue Type: Bug
>            Reporter: eric twilegar
>            Priority: Major
>
> I'm joking of course, but if that was your password the processor would fail as it would consider it an expression and not a password.
> In all seriousness though we really do something like "isPasswordExpression" checkbox for all controllers. This would also allow nifi registry to not consider them secrets and so you don't have to cut and paste ${ftp_password} after deploying a version. Maybe just adding passwordExpression vs sharing the property is a better idea. 
>  
> I didn't test whether you can escape the password in someway, so there is a chance this isn't a bug.
>  
>  



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)