Uploaded image for project: 'Hive'
  1. Hive
  2. HIVE-9013

Hive set command exposes metastore db password

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 0.13.1
    • 1.2.2, 1.3.0, 2.0.0
    • None

    Description

      When auth is enabled, we still need set command to set some variables(e.g. mapreduce.job.queuename), but set command alone also list all information(including vars in restrict list), this exposes like "javax.jdo.option.ConnectionPassword"
      I think conf var in the restrict list should also excluded from dump vars command.

      Attachments

        1. HIVE-9013.1.patch
          2 kB
          Binglin Chang
        2. HIVE-9013.2.patch
          3 kB
          Binglin Chang
        3. HIVE-9013.3.patch
          5 kB
          Binglin Chang
        4. HIVE-9013.4.patch
          4 kB
          Binglin Chang
        5. HIVE-9013.5.patch
          12 kB
          Binglin Chang
        6. HIVE-9013.5.patch
          12 kB
          Thejas Nair
        7. HIVE-9013.5.patch-branch1
          12 kB
          Sushanth Sowmyan
        8. HIVE-9013.5.patch-branch1.2
          12 kB
          Sushanth Sowmyan

        Issue Links

          incorporates

          Bug - A problem which impairs or prevents the functions of the product. HIVE-11670 Strip out password information from TezSessionState configuration

          • Major - Major loss of function.
          • Closed
          is related to

          Bug - A problem which impairs or prevents the functions of the product. HIVE-12345 Followup for HIVE-9013 : Hidden conf vars still visible through beeline

          • Major - Major loss of function.
          • Closed
          relates to

          Bug - A problem which impairs or prevents the functions of the product. HIVE-25929 Let secret config properties to be propagated to Tez

          • Major - Major loss of function.
          • Resolved
          supercedes

          Bug - A problem which impairs or prevents the functions of the product. HIVE-10508 Strip out password information from config passed to Tez/MR in cases where password encryption is not used

          • Major - Major loss of function.
          • Closed
          links to

          Web Link RB link

          Activity

            People

              decster Binglin Chang
              decster Binglin Chang
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: