[ 
https://issues.apache.org/jira/browse/HADOOP-10904?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14079859#comment-14079859
 ] 

Alejandro Abdelnur commented on HADOOP-10904:
---------------------------------------------

[~lmccay], how about following a common pattern such as...

All components that load a password (i.e. {{FileBaseKeyStoresFactory}} for SSL 
stuff) would add a new property (the old one + ".ref", ie: 
{{ssl.server.keystore.password.ref}}) that points to the credential ID. If the 
*REF* the property is defined, it takes precedence over the old property, if 
the *REF* property is not present, we print a deprecation warning and use the 
old property.



> Provide Alt to Clear Text Passwords through Cred Provider API
> -------------------------------------------------------------
>
>                 Key: HADOOP-10904
>                 URL: https://issues.apache.org/jira/browse/HADOOP-10904
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: security
>            Reporter: Larry McCay
>            Assignee: Larry McCay
>
> This is an umbrella jira to track various child tasks to uptake the 
> credential provider API to enable deployments without storing 
> passwords/credentials in clear text.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to