You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ambari.apache.org by "Nahappan Somasundaram (JIRA)" <ji...@apache.org> on 2016/11/14 23:22:58 UTC

[jira] [Created] (AMBARI-18888) Ambari-agent: Create configuration files with JCEKS information

Nahappan Somasundaram created AMBARI-18888:
----------------------------------------------

             Summary: Ambari-agent: Create configuration files with JCEKS information
                 Key: AMBARI-18888
                 URL: https://issues.apache.org/jira/browse/AMBARI-18888
             Project: Ambari
          Issue Type: Task
          Components: ambari-agent
            Reporter: Nahappan Somasundaram
            Assignee: Nahappan Somasundaram


When a non-status command is received, a command.json file is generated. This file contains the passwords used in a configuration. When the command is then executed, ambari agent spawns off a subprocess to execute component-specific Python scripts to generate the configuration files using the data from the command.json file.

To avoid storing clear text passwords in command.json file and configuration files, ambari-agent will first generate the JCEKS files corresponding to the configuration information in the command JSON blob coming from the server and then generate the command.json with the path to the JCEKS store instead of clear text passwords for *password* properties.

Subsequently when executing a command, ambari-agent will generate the configuration files with the JCEKS path information from command.json.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)