Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

Can the Ranger LDAP bind password be encrypted? It is stored in plain text in Ambari.

avatar
Super Collaborator
 
1 ACCEPTED SOLUTION

avatar

@terry Before Ambari 2.1.2, in order to have Ranger admin UI do authenticated binds to find role information we use to set these two properties as custom properties.

ranger.ldap.bind.dn
ranger.ldap.bind.password

Because of this the value of ranger.ldap.bind.password was always displayed in cleartext.

This was fix in Ambari 2.1.2 where the the ranger.ldap.bind.password is specified as a password field so the value is obscured. The relevant JIRA was AMBARI-12896

1192-screen-shot-2016-01-04-at-74711-pm.png

If you were referring to the the Ranger Usersync LDAP bind password that was only fixed in Ambari 2.2

Please double check which version of Ambari you are using.

View solution in original post

6 REPLIES 6

avatar
Contributor

what version of Ambari is being used? This looks like a bug. All passwords should be encrypted in the xml config file(s).

avatar
Super Collaborator

Ambari 2.1.2.1. You can see the password in clear text on the Ranger LDAP setup page.

avatar
Master Mentor

avatar

@terry Before Ambari 2.1.2, in order to have Ranger admin UI do authenticated binds to find role information we use to set these two properties as custom properties.

ranger.ldap.bind.dn
ranger.ldap.bind.password

Because of this the value of ranger.ldap.bind.password was always displayed in cleartext.

This was fix in Ambari 2.1.2 where the the ranger.ldap.bind.password is specified as a password field so the value is obscured. The relevant JIRA was AMBARI-12896

1192-screen-shot-2016-01-04-at-74711-pm.png

If you were referring to the the Ranger Usersync LDAP bind password that was only fixed in Ambari 2.2

Please double check which version of Ambari you are using.

avatar
Super Collaborator

This was the Usersync LDAP bind password block @Ancil McBarnett and the Ambari version is 2.1.2.1. All the other passwords are hidden.

avatar

Just one question.

AMBARI-12896 won't encrypt/obfscate password stored in ranger's xml file, will it?