[KNOX-1429] HadoopAuthFilter avoid logging sensitive values

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.7.0
• Fix Version/s: 1.2.0
• Assignee: Kevin Risden
• Reporter: Larry McCay
• Created: 28/Aug/18 20:08
• Updated: 28/Mar/19 13:57
• Resolved: 11/Oct/18 18:55

Description

When initializing the HadoopAuthProvider each of the properties in the provider config is logged as INFO.

For certain deployments, this may contain sensitive information.

We should move this to DEBUG level and potentially scrub the properties for properties that we know to be sensitive.