Nahappan Somasundaram created AMBARI-18888:
----------------------------------------------

             Summary: Ambari-agent: Create configuration files with JCEKS 
information
                 Key: AMBARI-18888
                 URL: https://issues.apache.org/jira/browse/AMBARI-18888
             Project: Ambari
          Issue Type: Task
          Components: ambari-agent
            Reporter: Nahappan Somasundaram
            Assignee: Nahappan Somasundaram


When a non-status command is received, a command.json file is generated. This 
file contains the passwords used in a configuration. When the command is then 
executed, ambari agent spawns off a subprocess to execute component-specific 
Python scripts to generate the configuration files using the data from the 
command.json file.

To avoid storing clear text passwords in command.json file and configuration 
files, ambari-agent will first generate the JCEKS files corresponding to the 
configuration information in the command JSON blob coming from the server and 
then generate the command.json with the path to the JCEKS store instead of 
clear text passwords for *password* properties.

Subsequently when executing a command, ambari-agent will generate the 
configuration files with the JCEKS path information from command.json.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to