sqoop-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Szabolcs Vasas <vasas.szabo...@gmail.com>
Subject Re: Review Request 64034: Sqoop must not log database passwords
Date Mon, 27 Nov 2017 09:55:24 GMT

This is an automatically generated e-mail. To reply, visit:

(Updated Nov. 27, 2017, 9:55 a.m.)

Review request for Sqoop.

Bugs: SQOOP-3257

Repository: sqoop-trunk


If sqoop.metastore.client.record.password property is set to true then Sqoop stores the database
password in the metastore. The problem is that in this case the password can be logged by
a couple of classes which needs to be avoided.

Diffs (updated)

  src/docs/user/saved-jobs.txt d21df02 
  src/java/org/apache/sqoop/SqoopJobDataPublisher.java 93be02f 
  src/java/org/apache/sqoop/SqoopOptions.java 587d4e1 
  src/java/org/apache/sqoop/metastore/GenericJobStorage.java 9e1b18b 
  src/java/org/apache/sqoop/metastore/PasswordRedactor.java PRE-CREATION 
  src/java/org/apache/sqoop/tool/JobTool.java dbe8934 
  src/test/org/apache/sqoop/credentials/TestPassingSecurePassword.java bd911f2 
  src/test/org/apache/sqoop/metastore/PasswordRedactorTest.java PRE-CREATION 

Diff: https://reviews.apache.org/r/64034/diff/2/

Changes: https://reviews.apache.org/r/64034/diff/1-2/


Unit tests and third party tests are executed.


Szabolcs Vasas

  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message