[OOZIE-2272] Use Hadoop's CredentialProvider for passwords in oozie-site

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: trunk
• Fix Version/s: 4.3.0
• Component/s: security
• Assignee: Robert Kanter
• Reporter: Robert Kanter
• Created: 12/Jun/15 23:20
• Updated: 01/Aug/17 06:47
• Resolved: 10/Jul/15 00:27

Description

We have a few passwords in oozie-site:

• oozie.email.smtp.password
• oozie.service.JPAService.jdbc.password

It would be good if we supported Hadoop's CredentialProvider so that the passwords can be specified in an external encrypted file. The file can be prepared as described here in the Hadoop docs.

Issue Links

• relates to: OOZIE-3018 Use Hadoop's CredentialProvider for passwords in SchemaCheckerService