[AMBARI-19471] Ambari-server: In HIVE and OOZIE configurations, annotate PASSWORD properties that need to be stored in a JCEKS provider

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.5.0
• Fix Version/s: 2.5.0
• Component/s: ambari-server
• Assignee: Nahappan Somasundaram
• Reporter: Nahappan Somasundaram
• Created: 11/Jan/17 19:58
• Updated: 11/Jan/17 23:26
• Resolved: 11/Jan/17 22:35

Description

In OOZIE and HIVE configs, annotate PASSWORD properties with keystore attribute to indicate that the value of the property has to be stored in a JCEKS file when credential store is enabled.

<property require-input="true">
<name>oozie.service.JPAService.jdbc.password</name>
<value/>
<display-name>Database Password</display-name>
<property-type>PASSWORD</property-type>
<description>
DB user password.

IMPORTANT: if password is emtpy leave a 1 space string, the service trims the value,
if empty Configuration assumes it is NULL.
</description>
<value-attributes>
<type>password</type>
<overridable>false</overridable>
<keystore>true</keystore>
</value-attributes>
<on-ambari-upgrade add="true"/>
</property>

<property require-input="true">
<name>javax.jdo.option.ConnectionPassword</name>
<value/>
<property-type>PASSWORD</property-type>
<display-name>Database Password</display-name>
<description>password to use against metastore database</description>
<value-attributes>
<type>password</type>
<overridable>false</overridable>
<hidden>HIVE_CLIENT,WEBHCAT_SERVER,HCAT,CONFIG_DOWNLOAD</hidden>
<keystore>true</keystore>
</value-attributes>
<on-ambari-upgrade add="true"/>
</property>

Issue Links

• links to: Review Board