question Re: Is there a way to store service configuration property in encrypted or encoded form in Ambari DB? in Archives of Support Questions (Read Only)

Is there a way to store service configuration property in encrypted or encoded form in Ambari DB?

Sha2Nk — Thu, 14 Apr 2016 13:02:38 GMT

Ambari stores the service configuration in postgresql DB. My service has password property as a part of configuration file, i want it to be stored in enrypted/encoded form.Is there any way to do that? I have checked in Ambari DB but it stored in plain text for my service. How Hive & oozie stored their DB credential ?

<name>password</name>

<property-type>PASSWORD</property-type>

<display-name>DB password</display-name>

<description>DB password.</description>

<value-attributes>

<type>password</type>

<overridable>false</overridable>

</value-attributes>

</property>

Re: Is there a way to store service configuration property in encrypted or encoded form in Ambari DB?

KuldeepK — Thu, 14 Apr 2016 13:10:10 GMT

@vpoornalingam

Re: Is there a way to store service configuration property in encrypted or encoded form in Ambari DB?

vpoornalingam — Thu, 14 Apr 2016 13:22:14 GMT

@Kuldeep Kulkarni

Yes - we could run "ambari-server setup-security" and select the option for Encryption.

Ambari Encrypt passwords

Its better to use Ambari 2.2 or above, wherein clear text passwords are taken care of.

Re: Is there a way to store service configuration property in encrypted or encoded form in Ambari DB?

KuldeepK — Thu, 14 Apr 2016 13:28:17 GMT

@Shashank Rai

Re: Is there a way to store service configuration property in encrypted or encoded form in Ambari DB?

Sha2Nk — Sun, 18 Aug 2019 10:53:09 GMT

Thanks for your response. @vpoornalingam

I am using ambari 2.3.2 , but still configuration property for my custom service gets stored in plain text format.

I tried with "ambari-server setup-security" but it encrypted the postgres db password. Not my custom service user entered password.

This seems a blocker to me, waited too long for a response but haven't received any satisfactory response.

Please, can somebody confirm whether ambari has a support for encryption/encoding for service configuration parameters? @Arun C. Murthy

Any help would be appreciated

Re: Is there a way to store service configuration property in encrypted or encoded form in Ambari DB?

Sha2Nk — Fri, 15 Apr 2016 13:17:44 GMT

Thanks for your response. @vpoornalingam

I am using ambari 2.3.2 , but still configuration property for my custom service gets stored in plain text format.

I tried with "ambari-server setup-security" but it encrypted the postgres db password. Not my custom service user entered password.

Re: Is there a way to store service configuration property in encrypted or encoded form in Ambari DB?

Sha2Nk — Mon, 18 Apr 2016 12:54:18 GMT

I have gone through the Ambari docs, but haven't found anything. Before I can made any conclusion regarding 'to encrypt configuration property entered by user for service' I want somebody to confirm the same about ambari support this use-case or not. @vpoornalingam @Kuldeep Kulkarni

Any help would be appreciated.

Re: Is there a way to store service configuration property in encrypted or encoded form in Ambari DB?

abajwa — Thu, 08 Dec 2016 02:41:01 GMT

@Shashank Rai Not currently supported but planned for 3.0: See https://issues.apache.org/jira/browse/AMBARI-19109

Re: Is there a way to store service configuration property in encrypted or encoded form in Ambari DB?

Sha2Nk — Wed, 28 Dec 2016 13:40:09 GMT

Thanks @Ali Bajwa