question Re: how to drop "ranger.usersync.ldap.ldapbindpassword" using config.sh script in Archives of Support Questions (Read Only)

how to drop "ranger.usersync.ldap.ldapbindpassword" using config.sh script

sagarshimpi — Wed, 28 Feb 2018 13:54:15 GMT

I am trying to automate ranger ldap integration. I am stuck at on how to drop "ranger.usersync.ldap.ldapbindpassword" value using ambari "config.sh" script ?

Can you please guide on how to achieve this ?

I tried to check in working cluster which has ranger ldap integrated and the output is as below -

# ./configs.sh -u admin -p admin -port 8080  get `hostname` hdptest ranger-ugsync-site |grep ldapbind
"ranger.usersync.ldap.ldapbindpassword" : "SECRET:ranger-ugsync-site:11:ranger.usersync.ldap.ldapbindpassword",

Not sure how the password is stored or taken in the value.

Re: how to drop "ranger.usersync.ldap.ldapbindpassword" using config.sh script

sagarshimpi — Wed, 28 Feb 2018 13:54:53 GMT

@rguruvannagari @Jay Kumar SenSharma

Re: how to drop "ranger.usersync.ldap.ldapbindpassword" using config.sh script

jsensharma — Wed, 28 Feb 2018 14:23:46 GMT

@Sagar Shimpi

Not sure if i understood the query correctly... But i tried this

1. Get the "ranger-ugsync-site" config as following using "action=get"

# /var/lib/ambari-server/resources/scripts/configs.py --user=admin --password=admin --port=8080 --action=get --host=localhost --cluster=plain_ambari --config-type=ranger-ugsync-site --file=/tmp/ranger-ugsync-site_payload.json

2. Edited the file "/tmp/ranger-ugsync-site_payload.json" and changed the value of property "ranger.usersync.ldap.ldapbindpassword" in clear text like "ABCD..blah..blah"

3. set this file back using the following command. (action=set)

# /var/lib/ambari-server/resources/scripts/configs.py --user=admin --password=admin --port=8080 --action=set --host=localhost --cluster=plain_ambari --config-type=ranger-ugsync-site --file=/tmp/ranger-ugsync-site_payload.json

Done.

In order to verify the password was set correctly or not i then tried to get the value again:

#  /var/lib/ambari-server/resources/scripts/configs.py --user=admin --password=admin --port=8080 --action=get --host=localhost --cluster=plain_ambari --config-type=ranger-ugsync-site | grep 'ldapbindpassword'

  "ranger.usersync.ldap.ldapbindpassword": "SECRET:ranger-ugsync-site:3:ranger.usersync.ldap.ldapbindpassword",

Re: how to drop "ranger.usersync.ldap.ldapbindpassword" using config.sh script

sagarshimpi — Thu, 01 Mar 2018 08:30:25 GMT

@Jay Kumar SenSharma It worked. thanks you alot for quick help.