[MAPREDUCE-710] Sqoop should read and transmit passwords in a more secure manner

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Hadoop Flags: Reviewed
• Assignee: Aaron Kimball
• Reporter: Aaron Kimball
• Created: 06/Jul/09 17:35
• Updated: 02/Jul/10 06:31
• Resolved: 15/Jul/09 10:45

Description

Sqoop's current support for passwords involves reading passwords from the command line "--password foo", which makes the password visible to other users via 'ps'. An invisible-console approach should be taken.

Related, Sqoop transmits passwords to mysqldump in the same fashion, which is also insecure.