[AMBARI-8734] Create a more secure way to obtain and handle KDC administrator credentials

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 2.0.0
• Fix Version/s: 2.3.0
• Component/s: ambari-server
• Labels: encryption kdc_credentials kerberos security
• Epic Link: Ambari Automated Kerberization
• Assignee: Robert Levas
• Reporter: Robert Levas
• Created: 16/Dec/14 16:18
• Updated: 29/Nov/17 21:01
• Resolved: 29/Nov/17 21:01

Description

The current mechanism for obtaining and handling KDC administrator credentials is not particularly secure thus allowing any knowledgeable user to potentally gain access to them.

A new mechanism needs to be put in place to security store this data for at least the duration of a HTTP session and potentially longer in the event Ambari allow for long-term storage of this data.

Ideally any solution is generic enough to handle secure data of any type.

Issue Links

• duplicates: AMBARI-13214 Create a credentials resource used to securely set, update, and remove credentials used by Ambari
• is related to: AMBARI-8725 Inject Clusters object into KerberosServerAction
• relates to: AMBARI-9014 Design admin principal session expiration handling API call