[HDFS-13654] Use a random secret when a secret file doesn't exist in HttpFS. This should be default.

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.3.0
• Component/s: httpfs, security
• Target Version/s: 3.3.0
• Assignee: Takanobu Asanuma
• Reporter: Pulkit Bhardwaj
• Created: 04/Jun/18 06:11
• Updated: 31/May/19 02:19
• Resolved: 31/May/19 01:31

Description

curl -s https://raw.githubusercontent.com/apache/hadoop/trunk/hadoop-hdfs-project/hadoop-hdfs-httpfs/src/main/conf/httpfs-signature.secret 
hadoop httpfs secret

 

The "secret" is a known string, it is better to keep this a random string so that it is not well known.