Uploaded image for project: 'Debezium'
  1. Debezium
  2. DBZ-702

Plaintext jaas configuration passwords logged out

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Minor
    • 0.8.0.Beta1
    • None
    • core-library
    • None

    Description

      Using debezium 7.5 connect docker image, setting these env variables to configure credentials for secured kafka brokers:

      CONNECT_SASL_JAAS_CONFIG=org.apache.kafka.common.security...
      CONNECT_CONSUMER_SASL_JAAS_CONFIG=org.apache.kafka.common.security...
      CONNECT_PRODUCER_SASL_JAAS_CONFIG=org.apache.kafka.common.security...

      In the container output log there are rows with plaintext passwords printed out.

      For example:
      {{--- Setting property from CONNECT_SASL_JAAS_CONFIG: sasl.jaas.config=org.apache.kafka.common... full jaas conf in plaintext!
      }}

      Note that some messages already have jaas config hidden, like this
      {{sasl.jaas.config = [hidden] }}

      Attachments

        Issue Links

          Activity

            People

              jpechane Jiri Pechanec
              pimpelsang Eero Koplimets (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: