Sunil Ganatra created AMBARI-26615:
--------------------------------------
Summary: Passwords are kept in plaintext under
stack-recommendation folders
Key: AMBARI-26615
URL: https://issues.apache.org/jira/browse/AMBARI-26615
Project: Ambari
Issue Type: Bug
Components: ambari-server
Affects Versions: 3.0.0
Reporter: Sunil Ganatra
After cluster is created, when you are performing Add service from ambari it is
writing passwords in plaintext in /var/run/
/var/run/ambari-server/stack-recommendations/** directories.
{code:java}
# grep -r password /var/run/
/var/run/ambari-server/stack-recommendations/1/services.json:
"rangertagsync_user_password" : "password",
/var/run/ambari-server/stack-recommendations/1/services.json:
"ranger_admin_password" : "password",
/var/run/ambari-server/stack-recommendations/1/services.json:
"rangerusersync_user_password" : "password",
/var/run/ambari-server/stack-recommendations/1/services.json:
"admin_password" : "password",
/var/run/ambari-server/stack-recommendations/1/services.json:
"keyadmin_user_password" : "password",
{code}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
