[
https://issues.apache.org/jira/browse/AMBARI-9480?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14309714#comment-14309714
]
Hudson commented on AMBARI-9480:
--------------------------------
SUCCESS: Integrated in Ambari-trunk-Commit #1708 (See
[https://builds.apache.org/job/Ambari-trunk-Commit/1708/])
AMBARI-9480. Ranger password properties are incorrectly included in Blueprint
export. (rnettleton) (rnettleton:
http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=9736a20990e9c35b295a0647742cd4e8291426a3)
*
ambari-server/src/main/resources/stacks/HDP/2.2/services/HIVE/configuration/ranger-hive-plugin-properties.xml
*
ambari-server/src/main/resources/common-services/KNOX/0.5.0.2.2/configuration/ranger-knox-plugin-properties.xml
*
ambari-server/src/main/resources/stacks/HDP/2.2/services/HBASE/configuration/ranger-hbase-plugin-properties.xml
*
ambari-server/src/main/resources/stacks/HDP/2.2/services/STORM/configuration/ranger-storm-plugin-properties.xml
*
ambari-server/src/main/resources/stacks/HDP/2.2/services/HDFS/configuration/ranger-hdfs-plugin-properties.xml
> Ranger password properties are incorrectly included in Blueprint export
> -----------------------------------------------------------------------
>
> Key: AMBARI-9480
> URL: https://issues.apache.org/jira/browse/AMBARI-9480
> Project: Ambari
> Issue Type: Bug
> Components: ambari-server
> Affects Versions: 2.0.0
> Reporter: Robert Nettleton
> Assignee: Robert Nettleton
> Fix For: 2.0.0
>
> Attachments: AMBARI-9480.patch.2
>
>
> Some new security configuration properties related to Ranger have been added
> to the stack definitions. Some of these properties are actually password
> configuration properties, but are not currently marked as such in the
> metadata.
> This causes exporting a Blueprint from a running cluster to include this
> password information in the exported Blueprint.
> Some of the Ranger-related password properties found across the stack are:
> REPOSITORY_CONFIG_PASSWORD
> SSL_TRUSTSTORE_PASSWORD
> SSL_KEYSTORE_PASSWORD
> The Ambari stack definitions need to be updated, such that these properties
> are marked as being of propert-type "PASSWORD". This will allow the
> Blueprint configuration processor to determine that these are indeed password
> properties, and should not be included in an exported Blueprint.
> I'm working on a fix for this, and will be submitting a patch shortly.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
