[
https://issues.apache.org/jira/browse/OOZIE-34?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13096717#comment-13096717
]
Harsh J commented on OOZIE-34:
------------------------------
The line of code at fault is at:
core/src/main/java/org/apache/oozie/service/JPAService.java:175
LOG.info("JPA configuration: {0}",
spi.getConfiguration().getConnectionProperties());
Not sure how to make this mask automatically, but there is a message format
string building kinda thing above a few lines of this that may be used?
> connProps should mask DB username and password when logging != DEBUG
> --------------------------------------------------------------------
>
> Key: OOZIE-34
> URL: https://issues.apache.org/jira/browse/OOZIE-34
> Project: Oozie
> Issue Type: Improvement
> Reporter: Esteban Gutierrez
>
> Currently Oozie writes the DB user name and password in oozie.log when
> debugging level is set to INFO:
> 2011-08-29 12:25:17,547 INFO StoreService:525 - USER[-] GROUP[-] TOKEN[-]
> APP[-] JOB[-] ACTION[-] JPA configuration:
> DriverClassName=com.mysql.jdbc.Driver,Url=jdbc:mysql://localhost:3306/oozie,Username=dbuser,Password=dbpassword,MaxActive=10
> Oozie should be able to mask the DB user and password like this:
> 2011-08-29 12:25:17,547 INFO StoreService:525 - USER[-] GROUP[-] TOKEN[-]
> APP[-] JOB[-] ACTION[-] JPA configuration:
> DriverClassName=com.mysql.jdbc.Driver,Url=jdbc:mysql://localhost:3306/oozie,Username=*****,Password=****,MaxActive=10
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
