You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ambari.apache.org by Jonathan Hurley <jh...@hortonworks.com> on 2014/11/13 18:55:48 UTC

Review Request 27999: Remove Nagios SSL Configuration From Ambari Scripts

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/27999/
-----------------------------------------------------------

Review request for Ambari, Alejandro Fernandez, Cabir Zounaidou, Dmytro Sen, and Nate Cole.


Bugs: AMBARI-8313
    https://issues.apache.org/jira/browse/AMBARI-8313


Repository: ambari


Description
-------

When Nagios was a part of the Ambari ecosystem, it was required that Ambari trusted the SSL connection with Nagios. This was configured via the `ambari-server setup-security` command.

Now that Nagios has been removed, trusting SSL connections is no longer necessary and this setup option should be removed.


Diffs
-----

  ambari-server/src/main/java/org/apache/ambari/server/configuration/ComponentSSLConfiguration.java 9dea43a 
  ambari-server/src/main/java/org/apache/ambari/server/configuration/Configuration.java 9970d9a 
  ambari-server/src/main/python/ambari-server.py cf70f48 
  ambari-server/src/test/java/org/apache/ambari/server/controller/internal/BaseBlueprintProcessorTest.java d40c29d 
  ambari-server/src/test/java/org/apache/ambari/server/controller/internal/BlueprintResourceProviderTest.java 9514b21 
  ambari-server/src/test/python/TestAmbariServer.py 0641929 

Diff: https://reviews.apache.org/r/27999/diff/


Testing
-------

mvn clean test

[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 12:36 min
[INFO] Finished at: 2014-11-13T12:48:48-05:00
[INFO] Final Memory: 30M/599M
[INFO] ------------------------------------------------------------------------

Verification that hte ambari-server options work:
```
[root@c6401 sbin]# ambari-server setup-security
Using python  /usr/bin/python2.6
Security setup options...
===========================================================================
Choose one of the following options:
  [1] Enable HTTPS for Ambari server.
  [2] Enable HTTPS for Ganglia service.
  [3] Encrypt passwords stored in ambari.properties file.
  [4] Setup Ambari kerberos JAAS configuration.
===========================================================================
Enter choice, (1-4):

Enter choice, (1-4): 3
Please provide master key for locking the credential store:

Enter choice, (1-4): 4
Setting up Ambari kerberos JAAS configuration to access secured Hadoop daemons...
Enter ambari server's kerberos principal name (ambari@EXAMPLE.COM):

Enter choice, (1-4): 5
Invalid choice
```


Thanks,

Jonathan Hurley


Re: Review Request 27999: Remove Nagios SSL Configuration From Ambari Scripts

Posted by Nate Cole <nc...@hortonworks.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/27999/#review61295
-----------------------------------------------------------

Ship it!


Ship It!

- Nate Cole


On Nov. 13, 2014, 12:55 p.m., Jonathan Hurley wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/27999/
> -----------------------------------------------------------
> 
> (Updated Nov. 13, 2014, 12:55 p.m.)
> 
> 
> Review request for Ambari, Alejandro Fernandez, Cabir Zounaidou, Dmytro Sen, and Nate Cole.
> 
> 
> Bugs: AMBARI-8313
>     https://issues.apache.org/jira/browse/AMBARI-8313
> 
> 
> Repository: ambari
> 
> 
> Description
> -------
> 
> When Nagios was a part of the Ambari ecosystem, it was required that Ambari trusted the SSL connection with Nagios. This was configured via the `ambari-server setup-security` command.
> 
> Now that Nagios has been removed, trusting SSL connections is no longer necessary and this setup option should be removed.
> 
> 
> Diffs
> -----
> 
>   ambari-server/src/main/java/org/apache/ambari/server/configuration/ComponentSSLConfiguration.java 9dea43a 
>   ambari-server/src/main/java/org/apache/ambari/server/configuration/Configuration.java 9970d9a 
>   ambari-server/src/main/python/ambari-server.py cf70f48 
>   ambari-server/src/test/java/org/apache/ambari/server/controller/internal/BaseBlueprintProcessorTest.java d40c29d 
>   ambari-server/src/test/java/org/apache/ambari/server/controller/internal/BlueprintResourceProviderTest.java 9514b21 
>   ambari-server/src/test/python/TestAmbariServer.py 0641929 
> 
> Diff: https://reviews.apache.org/r/27999/diff/
> 
> 
> Testing
> -------
> 
> mvn clean test
> 
> [INFO] ------------------------------------------------------------------------
> [INFO] BUILD SUCCESS
> [INFO] ------------------------------------------------------------------------
> [INFO] Total time: 12:36 min
> [INFO] Finished at: 2014-11-13T12:48:48-05:00
> [INFO] Final Memory: 30M/599M
> [INFO] ------------------------------------------------------------------------
> 
> Verification that hte ambari-server options work:
> ```
> [root@c6401 sbin]# ambari-server setup-security
> Using python  /usr/bin/python2.6
> Security setup options...
> ===========================================================================
> Choose one of the following options:
>   [1] Enable HTTPS for Ambari server.
>   [2] Enable HTTPS for Ganglia service.
>   [3] Encrypt passwords stored in ambari.properties file.
>   [4] Setup Ambari kerberos JAAS configuration.
> ===========================================================================
> Enter choice, (1-4):
> 
> Enter choice, (1-4): 3
> Please provide master key for locking the credential store:
> 
> Enter choice, (1-4): 4
> Setting up Ambari kerberos JAAS configuration to access secured Hadoop daemons...
> Enter ambari server's kerberos principal name (ambari@EXAMPLE.COM):
> 
> Enter choice, (1-4): 5
> Invalid choice
> ```
> 
> 
> Thanks,
> 
> Jonathan Hurley
> 
>


Re: Review Request 27999: Remove Nagios SSL Configuration From Ambari Scripts

Posted by Cabir Zounaidou <cz...@hortonworks.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/27999/#review61289
-----------------------------------------------------------

Ship it!


Ship It!

- Cabir Zounaidou


On Nov. 13, 2014, 5:55 p.m., Jonathan Hurley wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/27999/
> -----------------------------------------------------------
> 
> (Updated Nov. 13, 2014, 5:55 p.m.)
> 
> 
> Review request for Ambari, Alejandro Fernandez, Cabir Zounaidou, Dmytro Sen, and Nate Cole.
> 
> 
> Bugs: AMBARI-8313
>     https://issues.apache.org/jira/browse/AMBARI-8313
> 
> 
> Repository: ambari
> 
> 
> Description
> -------
> 
> When Nagios was a part of the Ambari ecosystem, it was required that Ambari trusted the SSL connection with Nagios. This was configured via the `ambari-server setup-security` command.
> 
> Now that Nagios has been removed, trusting SSL connections is no longer necessary and this setup option should be removed.
> 
> 
> Diffs
> -----
> 
>   ambari-server/src/main/java/org/apache/ambari/server/configuration/ComponentSSLConfiguration.java 9dea43a 
>   ambari-server/src/main/java/org/apache/ambari/server/configuration/Configuration.java 9970d9a 
>   ambari-server/src/main/python/ambari-server.py cf70f48 
>   ambari-server/src/test/java/org/apache/ambari/server/controller/internal/BaseBlueprintProcessorTest.java d40c29d 
>   ambari-server/src/test/java/org/apache/ambari/server/controller/internal/BlueprintResourceProviderTest.java 9514b21 
>   ambari-server/src/test/python/TestAmbariServer.py 0641929 
> 
> Diff: https://reviews.apache.org/r/27999/diff/
> 
> 
> Testing
> -------
> 
> mvn clean test
> 
> [INFO] ------------------------------------------------------------------------
> [INFO] BUILD SUCCESS
> [INFO] ------------------------------------------------------------------------
> [INFO] Total time: 12:36 min
> [INFO] Finished at: 2014-11-13T12:48:48-05:00
> [INFO] Final Memory: 30M/599M
> [INFO] ------------------------------------------------------------------------
> 
> Verification that hte ambari-server options work:
> ```
> [root@c6401 sbin]# ambari-server setup-security
> Using python  /usr/bin/python2.6
> Security setup options...
> ===========================================================================
> Choose one of the following options:
>   [1] Enable HTTPS for Ambari server.
>   [2] Enable HTTPS for Ganglia service.
>   [3] Encrypt passwords stored in ambari.properties file.
>   [4] Setup Ambari kerberos JAAS configuration.
> ===========================================================================
> Enter choice, (1-4):
> 
> Enter choice, (1-4): 3
> Please provide master key for locking the credential store:
> 
> Enter choice, (1-4): 4
> Setting up Ambari kerberos JAAS configuration to access secured Hadoop daemons...
> Enter ambari server's kerberos principal name (ambari@EXAMPLE.COM):
> 
> Enter choice, (1-4): 5
> Invalid choice
> ```
> 
> 
> Thanks,
> 
> Jonathan Hurley
> 
>