question Re: Is there a way to hide/encrypt manager's password for Ambari setup-ldap? in Archives of Support Questions (Read Only)

Is there a way to hide/encrypt manager's password for Ambari setup-ldap?

pminovic — Wed, 08 Feb 2017 16:05:03 GMT

That's authentication.ldap.managerPassword in /etc/ambari-server/ambari.properties. After running "ambari-server setup-ldap" it's stored as plain text in /etc/ambari-server/conf/ldap-password.dat. The best I can do is to change the file's ACL to 600, but I'd like to hide it.

Re: Is there a way to hide/encrypt manager's password for Ambari setup-ldap?

jsensharma — Wed, 08 Feb 2017 16:15:36 GMT

@Predrag Minovic

Did you try the following option:

ambari-server  encrypt-passwords

Optional: Encrypt Database and LDAP Passwords : http://docs.hortonworks.com/HDPDocuments/Ambari-2.4.2.0/bk_ambari-security/content/optional_encrypt_database_and_ldap_passwords.html

Re: Is there a way to hide/encrypt manager's password for Ambari setup-ldap?

pminovic — Wed, 08 Feb 2017 16:27:16 GMT

Oh, great! That worked, I used "ambari-server setup-security" and opted not to persist the master-key. Thanks!