incubator-ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Tom Beerbower (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (AMBARI-2691) Need https support for ganglia/nagios to be able to have https support throughout the stack.
Date Fri, 19 Jul 2013 12:10:48 GMT

    [ https://issues.apache.org/jira/browse/AMBARI-2691?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13713591#comment-13713591
] 

Tom Beerbower commented on AMBARI-2691:
---------------------------------------


Thanks [~mahadev],
 
{quote}
we will have to enable encrypt passwords 
{quote}

Okay, I'll discuss it with [~swagle].

{quote}
what kind of trusstore can it be?
{quote}

You can set the truststore type in ambari.properties.  Should I prompt for that in the setup?

{quote}
Can we import multiple certs into the trusstore?
{quote}

Yes, I use the aliases 'ganglia_cert' and 'nagios_cert'.  Others can be added as long as they
have different aliases.

{quote}
Also can we run the setup nagios https multiple times? Also does removing the 2 properties
disable the certs?
{quote}

It works like setup-https.  The first time you run the setup it will prompt to make sure that
you want to enable https, prompt for the truststore path and passord (if needed) and then
prompt for the cert to be added.  If you run setup when https for the component (ganglia or
nagios) is already enabled, it will prompt to see if you want to disable https.  If yes then
the cert will be removed and https marked disabled (set ganglia.https=false or nagios.https=false
in ambari.properties).  You can set the properties directly in ambari.properties to disable
https but the cert will not be removed from the truststore.

{quote}
Also what happens when ambari server is running as a different user. Will the trustore perms
need ot be changed?
{quote}

I think ambari server will need read access.  I don't know any way around that.






                
> Need https support for ganglia/nagios to be able to have https support throughout the
stack.
> --------------------------------------------------------------------------------------------
>
>                 Key: AMBARI-2691
>                 URL: https://issues.apache.org/jira/browse/AMBARI-2691
>             Project: Ambari
>          Issue Type: Task
>            Reporter: Tom Beerbower
>            Assignee: Tom Beerbower
>             Fix For: 1.2.6
>
>         Attachments: AMBARI-2691.patch
>
>


--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Mime
View raw message