question Re: Mask the password fields in a text file by using smart sense in Archives of Support Questions (Read Only)

Mask the password fields in a text file by using smart sense

shyam_kf657 — Tue, 31 May 2016 06:04:17 GMT

Hello Team,

I am using Ambari HDP 2.3 version. One of the host I installed Smart Sense, I need to do masking for some of the password fields. I have done masking for the fields which are present in XML files. But, I have passwords in text file as well. I am not aware how to mask those passwords also in text files. Please help me on this.

1) For the XML files masking is done by using below setup in Anonymization rule.

{ "name":"Delete_Yarn_Hbase_Hive_MR_Trust_Store_Password",

"path":"ssl-server.xml",

"property": "ssl.server.truststore.password",

"operation":"REPLACE",

"value":"Hidden" }

I am not aware to how to mask the password, in a text file. Awaiting for your reply.

Re: Mask the password fields in a text file by using smart sense

KuldeepK — Tue, 31 May 2016 12:07:19 GMT

@shyam gurram - Good question. I will try this and keep you updated.

Re: Mask the password fields in a text file by using smart sense

shyam_kf657 — Tue, 31 May 2016 21:58:26 GMT

Hi Kuldeep Kulkarni,

Awaiting for your comments.

Re: Mask the password fields in a text file by using smart sense

amiller — Wed, 01 Jun 2016 01:19:57 GMT

Anonymization rules are covered in the SmartSense Admin Guide. You will need to use a regular expression-based rule to mask from a text file. Depending on what text file(s) may contain passwords, you can either specify the exact filename or use a regular expression here as well. It's best to define the path as specifically as possible to avoid accidentally masking values in unrelated files.

The string to mask/replace is identified by a regular expression. Here's a very simple example that will replace a line that contains the string "password:" in my-credentials.txt:

  {
    "name":"my_credentials",
    "path":"my-credentials.txt",
    "pattern": ".*password:.*",
    "value": "password: Hidden"
  },

Re: Mask the password fields in a text file by using smart sense

czounaidou — Wed, 01 Jun 2016 05:21:09 GMT

You can also use sub-pattern to replace passwords in the text file.

{

"name": "replace_password",

"path": "my_secured_file.txt",

"pattern": "mypassword=([^ ]+) ",

"extract":"=([^ ]+)",

"value":"Hidden"

}

Re: Mask the password fields in a text file by using smart sense

shyam_kf657 — Mon, 06 Jun 2016 22:03:02 GMT

Hi Alex,

Thanks for the post, In a text file I have two properties. The script is working for one of the property, but as per the logic it should for the other property also.

env:KERBEROS_KADMINST_PASSWORD=t.w48oJj-

env:KERBEROS_MASTERDB_PASSWORD=xtW2+OGi-

The above are the two properties that i need to mask their passwords.

{ "name":"Hive_Pass_Phrase",

"path":"hive_config.txt",

"pattern": ".*PASSWORD.*$",

"operation":"REPLACE",

"value":"PASSWORD Hidden" },

As per the above code it should work for the both the properties, it is working only for env:KERBEROS_KADMINST_PASSWORD, not for other. Please help me on this.

Regards

Shyam