[
https://issues.apache.org/jira/browse/AMBARI-11004?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14543502#comment-14543502
]
Andrii Tkach commented on AMBARI-11004:
---------------------------------------
+1 for the patch.
> HBase&Hive services display passwords in plain text in Ambari 2.1
> -----------------------------------------------------------------
>
> Key: AMBARI-11004
> URL: https://issues.apache.org/jira/browse/AMBARI-11004
> Project: Ambari
> Issue Type: Bug
> Components: security
> Environment: ambari-server-2.1.0-398
> hadoop_2_3_0_0_1897-hdfs-2.7.1.2.3.0.0-1897
> Reporter: Irina Easterling
> Assignee: Aleksandr Kovalenko
> Priority: Critical
> Attachments: AMBARI-11004.1.patch, AMBARI-11004.patch,
> Ambari2.1_HiveService_PasswordPlainText.PNG
>
>
> HBase&Hive services display passwords in plain text in Ambari 2.1
> Step to reproduce:
> 1. Login to the Ambari web interface, http://<MASTER1>:8081
> 2. Select Hive or HBase service from Dashboard
> 3. Select Configs tab
> 4. Select 'Advanced ranger-hive-plugin-properties'
> 5. View the following fields where password in plain text:
> ‘Ranger repository config password’
> ‘SSL_KEYSTORE_PASSWORD’
> ‘SSL_TRUSTSTORE_PASSWORD’
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)