how to reset ambari db password in hdinsight cluster

[#1]

We are using Kerberized HDInsight(azure) cluster version 3.6 with ESP. Need your help to provide solution.

We need to sync LDAP user with Ambari. But unfortunately, ldap manager password is overwritten, due to which ambari-server sync-ldap is throwing authentication exception. In order to change ldap pwd, we need master key(keystore pwd) to unlock encrypted passwords using keytool command. We don't know master key as well.

In such scenario, we have no choice other than removing encryption entirely as per below url.

https://ambari.apache.org/current/installing-hadoop-using-ambari/content/ambari-rem-enc.html

Following the above url, how to reset the ambari db password mentioned in the 4th step. Since it's hdinsight cluster, ambari db is mssql(azure sql db). Below are the ambari parameter values in my cluster.

# grep database /etc/ambari-server/conf/ambari.properties

server.jdbc.hostname=pfcs0tpwwh.database.windows.net

server.jdbc.rca.user.name=v3660daaebbf188498e9102ad331ea8747bAmbariDbLogin@pfcs0tpwwh.database.windows.net

server.jdbc.database=mssql

server.jdbc.database_name=v3660daaebbf188498e9102ad331ea8747bAmbariDb

server.jdbc.rca.url=jdbc:sqlserver://pfcs0tpwwh.database.windows.net:1433;databaseName=v3660daaebbf188498e9102ad331ea8747bAmbariDb

check_database_skipped=false

server.jdbc.user.name=v3660daaebbf188498e9102ad331ea8747bAmbariDbLogin@pfcs0tpwwh.database.windows.net

local.database.user=postgres

server.jdbc.url=jdbc:sqlserver://pfcs0tpwwh.database.windows.net:1433;databaseName=v3660daaebbf188498e9102ad331ea8747bAmbariDb;trustServerCertificate=false;encrypt=true;hostNameInCertificate=*.database.windows.net

Can you please advise how to login and reset ambari db password in mssql?

Thanks..

[#2]

@Baskaran Marichetty

I don't have an mssql installed HDP cluster but I think the table names are consistent between the different databases, Mysql, MariaDB, Postgres, Oracle etc.

How to reset Ambari_admin password Check your MSSQL database for the table users by running the below TSQL

select user_id from users where user_name='admin' 

The above will validate the occurrence of Ambari admin user and follow the above link to reset the password. It's always a GOOD idea to take a backup of the Ambari database before any manipulation.

Keep me posted

[#3]

Thanks for your reply. Please note i'm trying change/reset database password not admin pwd.

In order to do that, if i issue the command ambari-server setup, choose 3rd option as y, we need to provide login credentials for mssql such as hostname, port, database name, user name etc., but these values are encrypted in ambari.properties file as you see in my above post. In such situation, what would be the default values of above parameters? what is the default credentials for successful login in ambari db using mssql?

Please help!