question Re: How do I enable the experimental FreeIPA support via the Ambari REST API in Archives of Support Questions (Read Only)

How do I enable the experimental FreeIPA support via the Ambari REST API

nlam — Mon, 09 Oct 2017 10:01:20 GMT

I'd like to automate a cluster build using FreeIPA as the identity/authentication infrastructure and I'm looking for a way to set the enableIpa flag in Ambari's experimental feature set via the REST API. Is this possible?

Re: How do I enable the experimental FreeIPA support via the Ambari REST API

jsensharma — Mon, 09 Oct 2017 11:12:27 GMT

@Nik Lam

You can try using the following API call to set "enableIpa" to "true"

curl -u admin:admin -i -H 'X-Requested-By: ambari' -X POST -d '{"user-pref-admin-supports":"{\"disableHostCheckOnAddHostWizard\":false,\"preUpgradeCheck\":true,\"displayOlderVersions\":false,\"autoRollbackHA\":false,\"alwaysEnableManagedMySQLForHive\":false,\"preKerberizeCheck\":false,\"customizeAgentUserAccount\":false,\"installGanglia\":false,\"opsDuringRollingUpgrade\":false,\"customizedWidgetLayout\":false,\"showPageLoadTime\":false,\"skipComponentStartAfterInstall\":false,\"preInstallChecks\":false,\"serviceAutoStart\":true,\"logSearch\":true,\"redhatSatellite\":false,\"enableIpa\":true,\"addingNewRepository\":false,\"kerberosStackAdvisor\":true,\"logCountVizualization\":false,\"enabledWizardForHostOrderedUpgrade\":true,\"manageJournalNode\":true}"}'   http://amb25101.example.com:8080/api/v1/persist

Please replace the "amb25101.example.com" with your Ambari Server Host.

If everything is OK then , the output of the Above Curl HTTP Response should be 202 as following:

HTTP/1.1 202 Accepted
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Cache-Control: no-store
Pragma: no-cache
Set-Cookie: AMBARISESSIONID=1o05iiupqulu6o52uwtl9cmhz;Path=/;HttpOnly
Expires: Thu, 01 Jan 1970 00:00:00 GMT
User: admin
Content-Type: text/plain
Content-Length: 0

Re: How do I enable the experimental FreeIPA support via the Ambari REST API

nlam — Tue, 10 Oct 2017 09:24:04 GMT

Thank you Jay. This worked.

Re: How do I enable the experimental FreeIPA support via the Ambari REST API

johnfolia — Tue, 07 Nov 2017 08:42:33 GMT

hi @Jay Kumar SenSharma,

I Could not see option for FreeIPA even after executing above command successfully.

I am Running Sanbox 2.6

,=====================

[root@sandbox-host ~]# curl -u raj_ops:raj_ops -i -H 'X-Requested-By: ambari' -X POST -d '{"user-pref-admin-supports":"{\"disableHostCheckOnAddHostWizard\":false,\"preUpgradeCheck\":true,\"displayOlderVersions\":false,\"autoRollbackHA\":false,\"alwaysEnableManagedMySQLForHive\":false,\"preKerberizeCheck\":false,\"customizeAgentUserAccount\":false,\"installGanglia\":false,\"opsDuringRollingUpgrade\":false,\"customizedWidgetLayout\":false,\"showPageLoadTime\":false,\"skipComponentStartAfterInstall\":false,\"preInstallChecks\":false,\"serviceAutoStart\":true,\"logSearch\":true,\"redhatSatellite\":false,\"enableIpa\":true,\"addingNewRepository\":false,\"kerberosStackAdvisor\":true,\"logCountVizualization\":false,\"enabledWizardForHostOrderedUpgrade\":true,\"manageJournalNode\":true}"}' http://192.168.1.13:8080/api/v1/persist

HTTP/1.1 202 Accepted

X-Frame-Options: DENY

X-XSS-Protection: 1; mode=block

X-Content-Type-Options: nosniff

Cache-Control: no-store

Pragma: no-cache

Set-Cookie: AMBARISESSIONID=19wiow0d4gtiqzmk5vz5n5nx;Path=/;HttpOnly

Expires: Thu, 01 Jan 1970 00:00:00 GMT

User: raj_ops

Content-Type: text/plain

Content-Length: 0

=======================

What is missing ?

Thanks

Re: How do I enable the experimental FreeIPA support via the Ambari REST API

enuriel — Wed, 11 Jul 2018 05:46:47 GMT

you are not missing anything, the option is not visible in the UI, because the call was not done by the wizard, and the wizard did not refresh its status. If you wait or restart the UI you should see the option listed- at least i did.