Uploaded image for project: 'Ambari'
  1. Ambari
  2. AMBARI-11004

HBase&Hive services display passwords in plain text in Ambari 2.1

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Critical
    • Resolution: Fixed
    • None
    • None
    • security
    • None

    • ambari-server-2.1.0-398
      hadoop_2_3_0_0_1897-hdfs-2.7.1.2.3.0.0-1897

    Description

      HBase&Hive services display passwords in plain text in Ambari 2.1

      Step to reproduce:
      1. Login to the Ambari web interface, http://<MASTER1>:8081
      2. Select Hive or HBase service from Dashboard
      3. Select Configs tab
      4. Select 'Advanced ranger-hive-plugin-properties'
      5. View the following fields where password in plain text:
      ‘Ranger repository config password’
      ‘SSL_KEYSTORE_PASSWORD’
      ‘SSL_TRUSTSTORE_PASSWORD’

      Attachments

        1. AMBARI-11004.1.patch
          11 kB
          Gabor Liptak
        2. AMBARI-11004.patch
          11 kB
          Gabor Liptak
        3. Ambari2.1_HiveService_PasswordPlainText.PNG
          186 kB
          Irina Easterling

        Activity

          People

            akovalenko Aleksandr Kovalenko
            ie255001 Irina Easterling
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: