[HIVE-7634] Use Configuration.getPassword() if available to eliminate passwords from hive-site.xml

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.14.0
• Component/s: Security
• Assignee: Jason Dere Assign to me
• Reporter: Jason Dere
• Created: 06/Aug/14 18:39
• Updated: 17/Dec/14 01:07
• Resolved: 09/Aug/14 01:29

Description

HADOOP-10607 provides a Configuration.getPassword() API that allows passwords to be retrieved from a configured credential provider, while also being able to fall back to the HiveConf setting if no provider is set up. Hive should use this API for versions of Hadoop that support this API. This would give users the ability to remove the passwords from their Hive configuration files.

Issue Links

• is related to: HADOOP-10607 Create an API to Separate Credentials/Password Storage from Applications
• relates to: HADOOP-10904 Provide Alt to Clear Text Passwords through Cred Provider API
• relates to: HIVE-7897 ObjectStore not using getPassword() for JDO connection string
• links to: https://reviews.apache.org/r/24439/