[ 
https://issues.apache.org/jira/browse/HADOOP-10428?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13958531#comment-13958531
 ] 

Alejandro Abdelnur commented on HADOOP-10428:
---------------------------------------------

I recall a similar discussion in hadoop-auth for the secret to sign cookie. The 
property does not contain the password, but the name of the file where the 
password is stored. And this is similar to what we do for keytabs and SSL 
keystores.

I'll update a patch with such change momentarily. 

>       JavaKeyStoreProvider should accept keystore password via configuration 
> falling back to ENV VAR
> -----------------------------------------------------------------------------------------------
>
>                 Key: HADOOP-10428
>                 URL: https://issues.apache.org/jira/browse/HADOOP-10428
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: security
>    Affects Versions: 3.0.0
>            Reporter: Alejandro Abdelnur
>            Assignee: Alejandro Abdelnur
>         Attachments: HADOOP-10428.patch
>
>
> Currently the password for the {{JavaKeyStoreProvider}} must be set in an ENV 
> VAR.
> Allowing the password to be set via configuration enables applications to 
> interactively ask for the password before initializing the 
> {{JavaKeyStoreProvider}}.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to