Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

Is there a way to store service configuration property in encrypted or encoded form in Ambari DB?

Solved Go to solution

Is there a way to store service configuration property in encrypted or encoded form in Ambari DB?

Explorer

Ambari stores the service configuration in postgresql DB. My service has password property as a part of configuration file, i want it to be stored in enrypted/encoded form.Is there any way to do that? I have checked in Ambari DB but it stored in plain text for my service. How Hive & oozie stored their DB credential ?

<property require-input="true">

<name>password</name>

<value> </value>

<property-type>PASSWORD</property-type>

<display-name>DB password</display-name>

<description>DB password.</description>

<value-attributes>

<type>password</type>

<overridable>false</overridable>

</value-attributes>

</property>

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted

Re: Is there a way to store service configuration property in encrypted or encoded form in Ambari DB?

@Shashank Rai Not currently supported but planned for 3.0: See https://issues.apache.org/jira/browse/AMBARI-19109

8 REPLIES 8

Re: Is there a way to store service configuration property in encrypted or encoded form in Ambari DB?

Super Guru

Re: Is there a way to store service configuration property in encrypted or encoded form in Ambari DB?

@Kuldeep Kulkarni

Yes - we could run "ambari-server setup-security" and select the option for Encryption.

Ambari Encrypt passwords

Its better to use Ambari 2.2 or above, wherein clear text passwords are taken care of.

Re: Is there a way to store service configuration property in encrypted or encoded form in Ambari DB?

Explorer

Thanks for your response. @vpoornalingam

I am using ambari 2.3.2 , but still configuration property for my custom service gets stored in plain text format.

I tried with "ambari-server setup-security" but it encrypted the postgres db password. Not my custom service user entered password.

Re: Is there a way to store service configuration property in encrypted or encoded form in Ambari DB?

Super Guru

Re: Is there a way to store service configuration property in encrypted or encoded form in Ambari DB?

Explorer

Thanks for your response. @vpoornalingam

I am using ambari 2.3.2 , but still configuration property for my custom service gets stored in plain text format.

I tried with "ambari-server setup-security" but it encrypted the postgres db password. Not my custom service user entered password.

3437-configuration.png

This seems a blocker to me, waited too long for a response but haven't received any satisfactory response.

Please, can somebody confirm whether ambari has a support for encryption/encoding for service configuration parameters? @Arun C. Murthy

Any help would be appreciated

Re: Is there a way to store service configuration property in encrypted or encoded form in Ambari DB?

Explorer

I have gone through the Ambari docs, but haven't found anything. Before I can made any conclusion regarding 'to encrypt configuration property entered by user for service' I want somebody to confirm the same about ambari support this use-case or not. @vpoornalingam @Kuldeep Kulkarni

Any help would be appreciated.

Highlighted

Re: Is there a way to store service configuration property in encrypted or encoded form in Ambari DB?

@Shashank Rai Not currently supported but planned for 3.0: See https://issues.apache.org/jira/browse/AMBARI-19109

Re: Is there a way to store service configuration property in encrypted or encoded form in Ambari DB?

Explorer

Thanks @Ali Bajwa