[ 
https://issues.apache.org/jira/browse/YARN-11308?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17609717#comment-17609717
 ] 

ASF GitHub Bot commented on YARN-11308:
---------------------------------------

goiri merged PR #4908:
URL: https://github.com/apache/hadoop/pull/4908




> Router Page display the db username and password in mask mode
> -------------------------------------------------------------
>
>                 Key: YARN-11308
>                 URL: https://issues.apache.org/jira/browse/YARN-11308
>             Project: Hadoop YARN
>          Issue Type: Bug
>          Components: federation
>    Affects Versions: 3.4.0
>            Reporter: fanshilun
>            Assignee: fanshilun
>            Priority: Major
>              Labels: pull-request-available
>         Attachments: image-2022-09-19-17-33-44-585.png, 
> image-2022-09-19-17-35-02-471.png
>
>
> When using YRAN-Federation's SQLFederationStateStore, we need to configure 
> yarn.federation.state-store.sql.username, 
> yarn.federation.state-store.sql.password in the configuration file, When 
> viewing Conf on the Router page, the user name and password are displayed in 
> plaintext, which will bring security risks. We should display it in the form 
> of a mask.
>  
> before fixing
> {code:java}
> <property>
>    <name>yarn.federation.state-store.sql.username</name>
>    <value>federation</value>
>    <final>false</final>
>    <source>yarn-site.xml</source>
> </property>
> <property>
>    <name>yarn.federation.state-store.sql.password</name>
>    <value>federation123</value>
>    <final>false</final>
>    <source>yarn-site.xml</source>
> </property> {code}
> after fixing
> {code:java}
> <property>
> <name>yarn.federation.state-store.sql.username</name>
> <value>******</value>
> <final>false</final>
> <source>yarn-site.xml</source>
> </property>
> <property>
> <name>yarn.federation.state-store.sql.password</name>
> <value>******</value>
> <final>false</final>
> <source>yarn-site.xml</source>
> </property>  {code}
>  
>  



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: yarn-issues-h...@hadoop.apache.org

Reply via email to