JR59696: PASSWORD IN CLEAR TEXT IS LOGGED DURING METADATA IMPORT USING HBASE CONNECTOR.

IBM InfoSphere Information Server, Version 11.7.1.1 (Fix Pack 1)
IBM InfoSphere Information Server, Version 11.7.1.1 for AIX
IBM InfoSphere Information Server, Version 11.7.1.1 for Windows
IBM InfoSphere Information Server, Version 11.7.1.1 for Linux
Download the mod pack for IBM InfoSphere Information Server 11.7.1.0 In-Place Upgrade

APAR status

• Closed as program error.

Error description

• Password used for Kerberos authentication during metadata
  import using HBase Connector gets logged in clear text to
  ${IIS_HOME}/ASBNode/logs/asb-agent-*.out IMAM doesn't recognize
  the HBase Connector's property 'password' as password-holding
  property and doesn't encrypt its value when sending connection
  request to the Connector via CAS which logs all requests in
  asb-agent-*.out
  

Local fix

Problem summary

• ****************************************************************
  USERS AFFECTED:
  IMAM users using HBase Connector to import metadata
  ****************************************************************
  PROBLEM DESCRIPTION:
  Password logged in clear text in asb-agent logs during metadata
  import using HBase Connector.
  ****************************************************************
  RECOMMENDATION:
  Install APAR JR59696 patch.
  ****************************************************************
  

Problem conclusion

• HBase Connector properties and model mapping have been changed,
  so that
  passwords are automatically masked in ASB agent log during
  metadata import.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WIS DATASTAGE

• Fixed component ID

  5724Q36DS

Applicable component levels

• RB50 PSY

     UP