[ 
https://issues.apache.org/jira/browse/NIFI-5270?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16508486#comment-16508486
 ] 

Andy LoPresto commented on NIFI-5270:
-------------------------------------

Hi Eric,

There has been some on-going discussion of this (pre-dating the NiFi Registry 
effort) and how it would relate to the Variable Registry. The effort has been 
paused a bit while other priorities have come up. 

I think the last discussion I recall had landed on "password guidance should 
explicitly prohibit literal passwords of the format {{'${xxx}'}}" as this was 
backward compatible with the existing {{PropertyDescriptor}} definitions and 
did not require additional work. Now may be a good time to re-evaluate that 
decision and perform new work for a future release. 

https://issues.apache.org/jira/browse/NIFI-2653
https://issues.apache.org/jira/browse/NIFI-3046
https://issues.apache.org/jira/browse/NIFI-3110
https://issues.apache.org/jira/browse/NIFI-3311
https://issues.apache.org/jira/browse/NIFI-3439
https://issues.apache.org/jira/browse/NIFI-4557

> my ftp password is "${password}" so nifi's LISTFtp won't use it.
> ----------------------------------------------------------------
>
>                 Key: NIFI-5270
>                 URL: https://issues.apache.org/jira/browse/NIFI-5270
>             Project: Apache NiFi
>          Issue Type: Bug
>            Reporter: eric twilegar
>            Priority: Major
>
> I'm joking of course, but if that was your password the processor would fail 
> as it would consider it an expression and not a password.
> In all seriousness though we really do something like "isPasswordExpression" 
> checkbox for all controllers. This would also allow nifi registry to not 
> consider them secrets and so you don't have to cut and paste ${ftp_password} 
> after deploying a version. Maybe just adding passwordExpression vs sharing 
> the property is a better idea. 
>  
> I didn't test whether you can escape the password in someway, so there is a 
> chance this isn't a bug.
>  
>  



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to