Support Questions
Find answers, ask questions, and share your expertise
Announcements
Check out our newest addition to the community, the Cloudera Innovation Accelerator group hub.

Is there a way to hide/encrypt manager's password for Ambari setup-ldap?

That's authentication.ldap.managerPassword in /etc/ambari-server/ambari.properties. After running "ambari-server setup-ldap" it's stored as plain text in /etc/ambari-server/conf/ldap-password.dat. The best I can do is to change the file's ACL to 600, but I'd like to hide it.

1 ACCEPTED SOLUTION

Super Mentor

@Predrag Minovic

Did you try the following option:

ambari-server  encrypt-passwords

.

Optional: Encrypt Database and LDAP Passwords : http://docs.hortonworks.com/HDPDocuments/Ambari-2.4.2.0/bk_ambari-security/content/optional_encrypt_...

View solution in original post

2 REPLIES 2

Super Mentor

@Predrag Minovic

Did you try the following option:

ambari-server  encrypt-passwords

.

Optional: Encrypt Database and LDAP Passwords : http://docs.hortonworks.com/HDPDocuments/Ambari-2.4.2.0/bk_ambari-security/content/optional_encrypt_...

Oh, great! That worked, I used "ambari-server setup-security" and opted not to persist the master-key. Thanks!