[HADOOP-10905] LdapGroupsMapping Should use configuration.getPassword for SSL and LDAP Passwords

• Type: Sub-task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.6.0
• Component/s: security
• Hadoop Flags: Reviewed
• Assignee: Larry McCay
• Reporter: Larry McCay
• Created: 30/Jul/14 19:46
• Updated: 25/Aug/16 15:52
• Resolved: 06/Aug/14 00:00

Description

By using Configuration.getPassword the credential provider API can be used to provide an alternative to storing the ssl and ldap bind passwords in clear text within the configuration files.

getPassword will enable us to not sure clear text passwords when required and provide backward compatibility for when it is not necessary and existing deployments.

Issue Links

• breaks: HADOOP-13353 LdapGroupsMapping getPassward shouldn't return null when IOException throws
• is related to: HADOOP-13548 Remove recursive dependencies of credential providers in LdapGroupsMapping