You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ambari.apache.org by "Dmytro Sen (JIRA)" <ji...@apache.org> on 2015/02/15 17:36:12 UTC

[jira] [Updated] (AMBARI-9653) ambari-server setup-security 'encrypt passwords' option does not save master password

     [ https://issues.apache.org/jira/browse/AMBARI-9653?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Dmytro Sen updated AMBARI-9653:
-------------------------------
    Attachment: AMBARI-9653.patch

> ambari-server setup-security 'encrypt passwords' option does not save master password
> -------------------------------------------------------------------------------------
>
>                 Key: AMBARI-9653
>                 URL: https://issues.apache.org/jira/browse/AMBARI-9653
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-server
>    Affects Versions: 2.0.0
>            Reporter: Dmytro Sen
>            Assignee: Dmytro Sen
>            Priority: Critical
>             Fix For: 2.0.0
>
>         Attachments: AMBARI-9653.patch
>
>
> root@c6501 yum.repos.d# ambari-server setup-security
> Using python /usr/bin/python2.6
> Security setup options...
> ===========================================================================
> Choose one of the following options: 
> 1 Enable HTTPS for Ambari server.
> 2 Enable HTTPS for Ganglia service.
> 3 Encrypt passwords stored in ambari.properties file.
> 4 Setup Ambari kerberos JAAS configuration.
> ===========================================================================
> Enter choice, (1-4): 3
> Please provide master key for locking the credential store: 
> Re-enter master key: 
> Do you want to persist master key. If you choose not to persist, you need to provide the Master Key while starting the ambari server as an env variable named AMBARI_SECURITY_MASTER_KEY or the start will prompt for the master key. Persist y/n ( y )? y
> Failed to save secure database password.
> Adjusting ambari-server permissions and ownership...
> Ambari Server 'setup-security' completed successfully.
> root@c6501 yum.repos.d# ambari-server setup-security
> Using python /usr/bin/python2.6
> Security setup options...
> ===========================================================================
> Choose one of the following options: 
> 1 Enable HTTPS for Ambari server.
> 2 Enable HTTPS for Ganglia service.
> 3 Encrypt passwords stored in ambari.properties file.
> 4 Setup Ambari kerberos JAAS configuration.
> ===========================================================================
> Enter choice, (1-4): 3
> Password encryption is enabled.
> Do you want to reset Master Key? y/n ( n ): y
> Master Key not persisted.
> Enter current Master Key:
> As I see ambari-server calls this to save master key:
> [root@c6501 ambari_server]# /usr/jdk64/jdk1.7.0_67/bin/java -cp /etc/ambari-server/conf:/usr/lib/ambari-server/*:/usr/local/sbin:/usr/local/n:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin:/sbin/:/usr/sbin:/usr/lib/ambari-server/*org.apache.ambari.server.security.encryption.MasterKeyServiceImpl 123 /var/lib/ambari-server/keys/master True
> Error: Could not find or load main class 123
> But this command does not have space before class name.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)