[HBASE-11810] Access SSL Passwords through Credential Provider API

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.99.0, 0.98.6
• Component/s: security
• Hadoop Flags: Reviewed
• Assignee: Larry McCay
• Reporter: Larry McCay
• Created: 23/Aug/14 01:30
• Updated: 06/Apr/18 17:51
• Resolved: 28/Aug/14 23:23

Description

HADOOP-10607 introduced the credential provider API for allowing passwords and other sensitive configuration items to be stored in an external provider.

RESTServer is accessing passwords stored in clear text in Configuration through the standard get() method. By using the new Configuration.getPassword method instead, the credential provider API will be checked first then fall back to clear text - when allowed.

Issue Links

• relates to: HADOOP-10904 Provide Alt to Clear Text Passwords through Cred Provider API