Uploaded image for project: 'Hadoop YARN'
  1. Hadoop YARN
  2. YARN-11726

Exposing Password Retrieval Process for Web Application Utilities in method `getPassword`

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Open
    • Major
    • Resolution: Unresolved
    • 3.3.6
    • None
    • yarn
    • None
    • Version: 3.3.6
      Location: hadoop/hadoop-yarn-project/hadoop-yarn/hadoop-yarn-common/src/main/java/org/apache/hadoop/yarn/webapp/util/WebAppUtils.java, in the getPassword method, lines 486-500.

    Description

      The method getPassword in WebAppUtils is responsible for securely retrieving passwords from the configuration based on the provided alias. If the alias is not set or if there's an issue during the retrieval, the system currently fails silently. Enhancing the logging within this method will provide more transparency and help diagnose configuration issues, such as missing or incorrect password aliases.
       
      Expected Behavior:
      The system should log the success or failure of password retrieval attempts, including any issues encountered during the process. This will improve traceability and allow administrators to more easily identify and correct misconfigurations or errors related to password management.
       
      How-to-Fix:
      We propose adding log statements to expose the success or failure of password retrieval operations. This will enhance the visibility of configuration-related issues, allowing administrators to better manage security credentials within YARN.

      Attachments

        1. original-vs-log-enhanced.md
          2 kB
          LoggingResearch
        2. TestWebAppUtils.java
          0.9 kB
          LoggingResearch

        Activity

          People

            Unassigned Unassigned
            loggingresearch LoggingResearch
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated: