Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

Is there a way to store service configuration property in encrypted or encoded form in Ambari DB?

avatar
Contributor

Ambari stores the service configuration in postgresql DB. My service has password property as a part of configuration file, i want it to be stored in enrypted/encoded form.Is there any way to do that? I have checked in Ambari DB but it stored in plain text for my service. How Hive & oozie stored their DB credential ?

<property require-input="true">

<name>password</name>

<value> </value>

<property-type>PASSWORD</property-type>

<display-name>DB password</display-name>

<description>DB password.</description>

<value-attributes>

<type>password</type>

<overridable>false</overridable>

</value-attributes>

</property>

1 ACCEPTED SOLUTION

avatar
8 REPLIES 8

avatar
Master Guru

avatar
@Kuldeep Kulkarni

Yes - we could run "ambari-server setup-security" and select the option for Encryption.

Ambari Encrypt passwords

Its better to use Ambari 2.2 or above, wherein clear text passwords are taken care of.

avatar
Contributor

Thanks for your response. @vpoornalingam

I am using ambari 2.3.2 , but still configuration property for my custom service gets stored in plain text format.

I tried with "ambari-server setup-security" but it encrypted the postgres db password. Not my custom service user entered password.

avatar
Master Guru

avatar
Contributor

Thanks for your response. @vpoornalingam

I am using ambari 2.3.2 , but still configuration property for my custom service gets stored in plain text format.

I tried with "ambari-server setup-security" but it encrypted the postgres db password. Not my custom service user entered password.

3437-configuration.png

This seems a blocker to me, waited too long for a response but haven't received any satisfactory response.

Please, can somebody confirm whether ambari has a support for encryption/encoding for service configuration parameters? @Arun C. Murthy

Any help would be appreciated

avatar
Contributor

I have gone through the Ambari docs, but haven't found anything. Before I can made any conclusion regarding 'to encrypt configuration property entered by user for service' I want somebody to confirm the same about ambari support this use-case or not. @vpoornalingam @Kuldeep Kulkarni

Any help would be appreciated.

avatar

@Shashank Rai Not currently supported but planned for 3.0: See https://issues.apache.org/jira/browse/AMBARI-19109

avatar
Contributor

Thanks @Ali Bajwa