[ https://issues.apache.org/jira/browse/HBASE-11810?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14115551#comment-14115551 ]
Hudson commented on HBASE-11810: -------------------------------- SUCCESS: Integrated in HBase-0.98-on-Hadoop-1.1 #457 (See [https://builds.apache.org/job/HBase-0.98-on-Hadoop-1.1/457/]) HBASE-11810 Access SSL Passwords through Credential Provider API (Larry McCay) (apurtell: rev c970a85cae355782e1a60bdec36f8340d8e1e422) * hbase-server/src/main/java/org/apache/hadoop/hbase/rest/RESTServer.java * hbase-common/src/main/java/org/apache/hadoop/hbase/HBaseConfiguration.java * hbase-common/src/test/java/org/apache/hadoop/hbase/TestHBaseConfiguration.java > Access SSL Passwords through Credential Provider API > ---------------------------------------------------- > > Key: HBASE-11810 > URL: https://issues.apache.org/jira/browse/HBASE-11810 > Project: HBase > Issue Type: Improvement > Components: security > Reporter: Larry McCay > Assignee: Larry McCay > Fix For: 0.99.0, 2.0.0, 0.98.6 > > Attachments: HBASE_11810-2.patch, HBASE_11810.patch > > > HADOOP-10607 introduced the credential provider API for allowing passwords > and other sensitive configuration items to be stored in an external provider. > RESTServer is accessing passwords stored in clear text in Configuration > through the standard get() method. By using the new Configuration.getPassword > method instead, the credential provider API will be checked first then fall > back to clear text - when allowed. -- This message was sent by Atlassian JIRA (v6.2#6252)