ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Dmytro Sen" <d...@hortonworks.com>
Subject Review Request 31063: ambari-server setup-security 'encrypt passwords' option does not save master password
Date Sun, 15 Feb 2015 16:35:30 GMT

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/31063/
-----------------------------------------------------------

Review request for Ambari, Myroslav Papirkovskyy and Vitalyi Brodetskyi.


Bugs: AMBARI-9653
    https://issues.apache.org/jira/browse/AMBARI-9653


Repository: ambari


Description
-------

root@c6501 yum.repos.d# ambari-server setup-security
Using python /usr/bin/python2.6
Security setup options...
===========================================================================
Choose one of the following options: 
1 Enable HTTPS for Ambari server.
2 Enable HTTPS for Ganglia service.
3 Encrypt passwords stored in ambari.properties file.
4 Setup Ambari kerberos JAAS configuration.
===========================================================================
Enter choice, (1-4): 3
Please provide master key for locking the credential store: 
Re-enter master key: 
Do you want to persist master key. If you choose not to persist, you need to provide the Master
Key while starting the ambari server as an env variable named AMBARI_SECURITY_MASTER_KEY or
the start will prompt for the master key. Persist y/n ( y )? y
Failed to save secure database password.
Adjusting ambari-server permissions and ownership...
Ambari Server 'setup-security' completed successfully.
root@c6501 yum.repos.d# ambari-server setup-security
Using python /usr/bin/python2.6
Security setup options...
===========================================================================
Choose one of the following options: 
1 Enable HTTPS for Ambari server.
2 Enable HTTPS for Ganglia service.
3 Encrypt passwords stored in ambari.properties file.
4 Setup Ambari kerberos JAAS configuration.
===========================================================================
Enter choice, (1-4): 3
Password encryption is enabled.
Do you want to reset Master Key? y/n ( n ): y
Master Key not persisted.
Enter current Master Key:
As I see ambari-server calls this to save master key:
[root@c6501 ambari_server]# /usr/jdk64/jdk1.7.0_67/bin/java -cp /etc/ambari-server/conf:/usr/lib/ambari-server/*:/usr/local/sbin:/usr/local/n:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin:/sbin/:/usr/sbin:/usr/lib/ambari-server/*org.apache.ambari.server.security.encryption.MasterKeyServiceImpl
123 /var/lib/ambari-server/keys/master True
Error: Could not find or load main class 123
But this command does not have space before class name.


Diffs
-----

  ambari-server/src/main/python/ambari_server/serverConfiguration.py 035bdb3 
  ambari-server/src/main/python/ambari_server/serverSetup.py 28a2063 

Diff: https://reviews.apache.org/r/31063/diff/


Testing
-------

all tests passed


Thanks,

Dmytro Sen


Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message