[HIVE-12282] beeline - update command printing in verbose mode

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.0.0
• Component/s: Beeline
• Hadoop Flags: Reviewed
• Assignee: Daniel Dai
• Reporter: Daniel Dai
• Created: 28/Oct/15 01:05
• Updated: 16/Feb/16 23:52
• Resolved: 29/Oct/15 04:26

Description

In verbose mode, beeline prints the password used in commandline to STDERR.
This is not a good security practice.

Issue is in BeeLine.java code -

    if (url != null) {
      String com = "!connect "
          + url + " "
          + (user == null || user.length() == 0 ? "''" : user) + " "
          + (pass == null || pass.length() == 0 ? "''" : pass) + " "
          + (driver == null ? "" : driver);
      debug("issuing: " + com);
      dispatch(com);
    }