Is there a way to hide/encrypt manager's password for Ambari setup-ldap?

[#1]

That's authentication.ldap.managerPassword in /etc/ambari-server/ambari.properties. After running "ambari-server setup-ldap" it's stored as plain text in /etc/ambari-server/conf/ldap-password.dat. The best I can do is to change the file's ACL to 600, but I'd like to hide it.

[#2 · Accepted solution]

@Predrag Minovic

Did you try the following option:

ambari-server  encrypt-passwords

.

Optional: Encrypt Database and LDAP Passwords : http://docs.hortonworks.com/HDPDocuments/Ambari-2.4.2.0/bk_ambari-security/content/optional_encrypt_...

[#3]

Oh, great! That worked, I used "ambari-server setup-security" and opted not to persist the master-key. Thanks!