Uploaded image for project: 'Apache Knox'
  1. Apache Knox
  2. KNOX-2147

Keep username and password out of KnoxShellTableCallHistory

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 1.4.0
    • Component/s: KnoxShell
    • Labels:
      None

      Description

      In working on KNOX-2132, I couldn't actually get the call history to work and was therefore unable to make sure that the username and password params don't end up in the persisted history or at least not rendered in the listing.

      Either call history no longer works or I just don't know how to enable it. Tests don't seem to cover the actual AOP based capture but record hardcoded calls rather than actual table interactions. I also notice that the aspectjrt.jar isn't being placed in the lib dir for knoxshell which seems broken.

      So, first thing to do is ensure that call history is actually working and fix it if not. Then determine what to do about the username and password and persistence of call histories as the means for reconstituting a dataset. Do we build in a required login which would mean that the dataset rehydration would require a user interaction for login? Do we encrypt the credentials - if so, using what as a key and how to manage it? Do we just rely on file permissions?

       

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                smolnar Sandor Molnar
                Reporter:
                lmccay Larry McCay
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 1h 20m
                  1h 20m