Skip to content

support mask password when show create query#6240

Closed
zhang2014 wants to merge 3 commits intoClickHouse:masterfrom
zhang2014:feature/specific_function_parser
Closed

support mask password when show create query#6240
zhang2014 wants to merge 3 commits intoClickHouse:masterfrom
zhang2014:feature/specific_function_parser

Conversation

@zhang2014
Copy link
Copy Markdown
Contributor

@zhang2014 zhang2014 commented Jul 31, 2019

I hereby agree to the terms of the CLA available at: https://yandex.ru/legal/cla/?lang=en

Category (leave one):

  • Improvement

Short description (up to few sentences):
Passwords that support masking MySQL engines and maybe related #6217

Fixes #3311

@zhang2014 zhang2014 force-pushed the feature/specific_function_parser branch from 5d46119 to f9291c7 Compare August 5, 2019 10:12
@zhang2014 zhang2014 marked this pull request as ready for review August 5, 2019 10:12
@zhang2014
Copy link
Copy Markdown
Contributor Author

@akuzm Done.

@zhang2014 zhang2014 changed the title masking MySQL engines password support mask password when show create query Aug 5, 2019
@zhang2014 zhang2014 mentioned this pull request Aug 6, 2019
@geldot
Copy link
Copy Markdown
Contributor

geldot commented Aug 22, 2019

This patch introduces a lot of complexity. 34 files patched, many prototypes changes.

Perhaps it's time to come up with a clean way to store hostname/secrets/credentials instead? Either in flat file, a table or similar. The logic is already there for dictionaries and could be reused.

We had a security alert weeks ago due to MySQL passwords and hostnames being exposed in CH SQL admin/query tools recently. Adding masking code to every tool isn't possible.

Apologies for the fly-by comment if this has already been discussed.

Related: #6358

@stale
Copy link
Copy Markdown

stale bot commented Oct 20, 2019

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

@stale stale bot added the not planned Known issue, no plans to fix it currenlty label Oct 20, 2019
@blinkov blinkov added pr-feature Pull request with new product feature and removed not planned Known issue, no plans to fix it currenlty labels Oct 20, 2019
@zhang2014
Copy link
Copy Markdown
Contributor Author

@geldot is right.
close it.

@zhang2014 zhang2014 closed this Nov 1, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

pr-feature Pull request with new product feature

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Password exposed by SHOW CREATE TABLE command for table with MySQL engine

4 participants