Sangeeta Ravindran created AMBARI-11967:
-------------------------------------------
Summary: Oozie db password appears in clear text in client config
downloaded from Ambari UI
Key: AMBARI-11967
URL: https://issues.apache.org/jira/browse/AMBARI-11967
Project: Ambari
Issue Type: Bug
Components: ambari-web
Affects Versions: 2.1.0
Reporter: Sangeeta Ravindran
Assignee: Sangeeta Ravindran
1. Navigate to Services->Oozie.
2. From the Service Action menu, click on Download Client Configs.
3. Save and extract the OOZIE_CLIENT-configs.tar.gz.
4. Open oozie-site.xml. The oozie.service.JPAService.jdbc.password appears in
clear text.
<property>
<name>oozie.service.JPAService.jdbc.password</name>
<value>passw0rd</value>
</property>
The password should not be included in the downloaded client config file.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
