Can the Ranger LDAP bind password be encrypted? It is stored in plain text in Ambari.

[#1]

what version of Ambari is being used? This looks like a bug. All passwords should be encrypted in the xml config file(s).

[#2]

Ambari 2.1.2.1. You can see the password in clear text on the Ranger LDAP setup page.

[#3]

@Ancil McBarnett

[#4 · Accepted solution]

@terry Before Ambari 2.1.2, in order to have Ranger admin UI do authenticated binds to find role information we use to set these two properties as custom properties.

ranger.ldap.bind.dn
ranger.ldap.bind.password

Because of this the value of ranger.ldap.bind.password was always displayed in cleartext.

This was fix in Ambari 2.1.2 where the the ranger.ldap.bind.password is specified as a password field so the value is obscured. The relevant JIRA was AMBARI-12896

If you were referring to the the Ranger Usersync LDAP bind password that was only fixed in Ambari 2.2

Please double check which version of Ambari you are using.

[#5]

This was the Usersync LDAP bind password block @Ancil McBarnett and the Ambari version is 2.1.2.1. All the other passwords are hidden.

[#6]

Just one question.

AMBARI-12896 won't encrypt/obfscate password stored in ranger's xml file, will it?