Venkat Ranganathan created SQOOP-1471:
-----------------------------------------

             Summary: Use Hadoop CredentialProvider API to encyrpt passwords at 
rest
                 Key: SQOOP-1471
                 URL: https://issues.apache.org/jira/browse/SQOOP-1471
             Project: Sqoop
          Issue Type: Bug
    Affects Versions: 1.4.5, 1.4.4
         Environment: Hadoop 2.6.0+
            Reporter: Venkat Ranganathan
            Assignee: Venkat Ranganathan
             Fix For: 1.4.6


HADOOP-10607 introduces an API to isolate password Storage from applications.   
This can be used to provide the DB password in a secure fashion to Sqoop users.

The DB passwords can be assigned an alias and stored in a keystore and the 
alias can be provided to Sqoop.
Option to provide the password on the command line (using --password-alias) 
option can be introduced as well as enhance the secure file option that we 
currently have to provide a new password loader that resolves the alias from 
keystore.

We need to detect the availability of the Credential Provider feature and use 
it and fail gracefully otherwise



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to