[SLIDER-254] Use hadoop CredentialProvider for sensitive configs

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Sprint: Slider August #2
• Assignee: Billie Rinaldi
• Reporter: Billie Rinaldi
• Created: 23/Jul/14 20:14
• Updated: 26/Aug/14 17:02
• Resolved: 26/Aug/14 17:02

Description

Accumulo requires a couple of sensitive pieces of information to be provided when it is starting up (including the Accumulo root user's password). Those are currently provided in the appConfig.json file. Hadoop common is adding a CredentialProvider (HADOOP-10607) that allows you to enter passwords into a Java KeyStore (the storage mechanism is pluggable) and to retrieve them. This is in branch-2 and trunk, though I'm not sure which branch-2 release it will make it into. I'd like to add a capability into Slider to prompt the user for needed passwords and store them using CredentialProvider so they can be retrieved by an app later.

Issue Links

• depends upon: HADOOP-10607 Create an API to Separate Credentials/Password Storage from Applications
• depends upon: SLIDER-321 Switch to Hadoop 2.6-SNAPSHOT
• supercedes: SLIDER-284 Build and test against Hadoop 2.5 RC and release