LAE

Welcome to the LAE community!  Please feel free to start a discussion in the discussion tab or join in a conversation.

Discussions

Members

Resources

Events

 View Only
  • 1.  BRS file storing Hadoop Hive serveruser name and passwords

    Employee
    Posted 09-19-2014 03:24

    Note: This was originally posted by an inactive account. Content was preserved by moving under an admin account.

    Originally posted by: spalluru

    Hi Team,
    We are using jdbc nodes to connect to Hive/Hadoop server and we see that username(DbUser) and passwords ( DbPassword)
    are getting stored in BRS file, is there any way we can mask them to avoid security issues

    -Sreekanth


  • 2.  RE: BRS file storing Hadoop Hive serveruser name and passwords

    Employee
    Posted 09-19-2014 09:16

    Note: This was originally posted by an inactive account. Content was preserved by moving under an admin account.

    Originally posted by: stonysmith

    What version # are you seeing this in, and is the BRS on your PC, or up on a server?
    I'm not aware of any way to suppress this behavior .. it should be entered as a new enhancement.

    This should only happen with parameters that are defined at the graph level and are RUN parameters.

    If it is an urgent security issue, you could change them to GraphParameters1 or GraphParamters2, or you could externalize the password by using {{*Password*}} which would allow the password to be supplied by the unix environment.


  • 3.  RE: BRS file storing Hadoop Hive serveruser name and passwords

    Employee
    Posted 09-22-2014 05:13

    Note: This was originally posted by an inactive account. Content was preserved by moving under an admin account.

    Originally posted by: spalluru

    Hi ,
    We are using 4.6.1 enterprise , LS running on Linux server. Yes , we are seeing this when we pass the parameters using graph level RUN parameters and currently observing passwords present on client PC BRS file
    -If we change the parameters to Graph Parameters1&2 , does that mean they will not store password in BRP/BRS files both on client and server environment ?
    -If we externalize the password and supply same from Unix , may I know the details how it can be done ? do mean we can pass them through wrapper shell scripts ?
    -Also , is there any way lavastorm user password which is passed as part of laeController command can be encrypted ?
    Please note LAE is being implemented for FS domain and security is great concern for them
    -Sreekanth