[
https://issues.apache.org/jira/browse/AMBARI-2691?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13713591#comment-13713591
]
Tom Beerbower commented on AMBARI-2691:
---------------------------------------
Thanks [~mahadev],
{quote}
we will have to enable encrypt passwords
{quote}
Okay, I'll discuss it with [~swagle].
{quote}
what kind of trusstore can it be?
{quote}
You can set the truststore type in ambari.properties. Should I prompt for that
in the setup?
{quote}
Can we import multiple certs into the trusstore?
{quote}
Yes, I use the aliases 'ganglia_cert' and 'nagios_cert'. Others can be added
as long as they have different aliases.
{quote}
Also can we run the setup nagios https multiple times? Also does removing the 2
properties disable the certs?
{quote}
It works like setup-https. The first time you run the setup it will prompt to
make sure that you want to enable https, prompt for the truststore path and
passord (if needed) and then prompt for the cert to be added. If you run setup
when https for the component (ganglia or nagios) is already enabled, it will
prompt to see if you want to disable https. If yes then the cert will be
removed and https marked disabled (set ganglia.https=false or
nagios.https=false in ambari.properties). You can set the properties directly
in ambari.properties to disable https but the cert will not be removed from the
truststore.
{quote}
Also what happens when ambari server is running as a different user. Will the
trustore perms need ot be changed?
{quote}
I think ambari server will need read access. I don't know any way around that.
> Need https support for ganglia/nagios to be able to have https support
> throughout the stack.
> --------------------------------------------------------------------------------------------
>
> Key: AMBARI-2691
> URL: https://issues.apache.org/jira/browse/AMBARI-2691
> Project: Ambari
> Issue Type: Task
> Reporter: Tom Beerbower
> Assignee: Tom Beerbower
> Fix For: 1.2.6
>
> Attachments: AMBARI-2691.patch
>
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
