ambari-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Lukáš Drbal <lukas.dr...@gmail.com>
Subject Re: setup-security in silent mode
Date Mon, 04 Apr 2016 16:48:59 GMT
Hi Dmitry,

thanks for replay, but its not exactly true.

"ambari-server setup-security" do some "magic" with provided SSL certs/keys
which is stored in my situation here:
root@<hostname>:/etc/ambari-server/conf# ls -la /var/lib/ambari-server/keys/
total 64
drwx------ 3 root root 4096 Apr  4 16:34 .
drwxr-xr-x 5 root root 4096 Mar 30 21:31 ..
-rw------- 1 root root  779 Mar 10 18:24 ca.config
-rw------- 1 root root 7153 Mar 30 21:32 ca.crt
-rw------- 1 root root 1651 Mar 30 21:32 ca.csr
-rw------- 1 root root 3311 Mar 30 21:32 ca.key
drwx------ 3 root root 4096 Mar 30 21:32 db
*-rw------- 1 root root 2698 Apr  4 16:34 https.crt*
*-rw------- 1 root root 1751 Apr  4 16:34 https.key*
*-rw------- 1 root root 4917 Apr  4 16:34 https.keystore.p12*
*-rw------- 1 root root   50 Apr  4 16:34 https.pass.txt*
*-rw------- 1 root root 5693 Mar 30 21:32 keystore.p12*
*-rw------- 1 root root   50 Mar 30 21:31 pass.txt*

https.crt has same md5sum as original certificate, but that's all what i
know for now. Its maybe time to look into source code.


L.

On Thu, Mar 31, 2016 at 12:29 PM, Dmitry Sen <dsen@hortonworks.com> wrote:

> Hi,
>
>
> "ambari-server setup-security" just adds some lines to
> /etc/ambari-server/conf/ambari.properties
>
> So you can add them in non-interactive mode and restart ambari-server
>
> ​
> ------------------------------
> *From:* Lukáš Drbal <lukas.drbal@gmail.com>
> *Sent:* Thursday, March 31, 2016 1:01 AM
> *To:* user@ambari.apache.org
> *Subject:* setup-security in silent mode
>
> Hi,
>
> is there any way how to setup security for ambari (https) in non
> interactive mode?
> I need update my ansible role for ambari server and use https but all what
> i find use comman "ambari-server setup-security" in interactive mode. Its
> possible use some args?
>
> Thanks.
>
> --
> Save The World - http://www.worldcommunitygrid.org/
> http://www.worldcommunitygrid.org/stat/viewMemberInfo.do?userName=LesTR
>
> LesTR
>



-- 
Save The World - http://www.worldcommunitygrid.org/
http://www.worldcommunitygrid.org/stat/viewMemberInfo.do?userName=LesTR

LesTR

Mime
View raw message