[
https://issues.apache.org/jira/browse/ACCUMULO-1720?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Michael Allen updated ACCUMULO-1720:
------------------------------------
Summary: Accumulo saves the root user's password in the clear in Zookeeper
(was: Accumulo saves user passwords in the clear (including the root password)
in Zookeeper)
> Accumulo saves the root user's password in the clear in Zookeeper
> -----------------------------------------------------------------
>
> Key: ACCUMULO-1720
> URL: https://issues.apache.org/jira/browse/ACCUMULO-1720
> Project: Accumulo
> Issue Type: Bug
> Components: tserver
> Affects Versions: 1.5.0
> Reporter: Michael Allen
>
> In reviewing some of the security around users, it came to my attention that
> Accumulo stores passwords within Zookeeper in the clear. Grepping through
> Zookeeper's data files proves this out (as does inspecting the code).
> These passwords should be stored heavily salted and hashed.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
