[HIVE-7175] Provide password file option to beeline

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.13.0
• Fix Version/s: 1.2.0
• Component/s: CLI, Clients
• Labels: features security
• Release Note: Added an --password-file (or, -w) option to BeeLine CLI, to read a password from a permission-protected file instead of supplying it in plaintext form as part of the command (-p).
• Assignee: Dr. Wendell Urth
• Reporter: Robert Justice
• Created: 04/Jun/14 16:07
• Updated: 06/Jul/17 13:56
• Resolved: 05/Feb/15 19:53

Description

For people connecting to Hive Server 2 with LDAP authentication enabled, in order to batch run commands, we currently have to provide the password openly in the command line. They could use some expect scripting, but I think a valid improvement would be to provide a password file option similar to other CLI commands in hadoop (e.g. sqoop) to be more secure.

Issue Links

• is related to: HIVE-17014 Password File Encryption for HiveServer2 Client
• relates to: HIVE-13589 beeline support prompt for password with '-p' option
• relates to: HADOOP-10607 Create an API to Separate Credentials/Password Storage from Applications
• links to: Review Board