Github user dyozie commented on a diff in the pull request:
https://github.com/apache/incubator-hawq-docs/pull/60#discussion_r87921329
--- Diff: clientaccess/roles_privs.html.md.erb ---
@@ -159,47 +159,44 @@ You can set your chosen encryption method system-wide
or on a per-session basis.
#### <a id="topic11"></a>System-wide
-To set the `password_hash_algorithm` server parameter on a complete HAWQ
system \(master and its segments\):
+You will perform different procedures to set the encryption method
system-wide depending upon whether you manage your cluster from the command
line or use Ambari. If you use Ambari to manage your HAWQ cluster, you must
ensure that you update encryption method configuration parameters via the
Ambari Web UI only. If you manage your HAWQ cluster from the command line, you
will use the `hawq config` command line utility to set encryption method
configuration parameters.
-1. Log into your HAWQ instance as a superuser.
-2. Execute `hawq config` with the `password_hash_algorithm` set to
`SHA-256` \(or `SHA-256-FIPS` to use the FIPS-compliant libraries for SHA-256\)
+To set the `password_hash_algorithm` server parameter on all nodes in your
HAWQ cluster \(master and its segments\):
- ``` bash
- $ hawq config -c password_hash_algorithm -v 'SHA-256'
- ```
-
- or:
-
- ``` bash
- $ hawq config -c password_hash_algorithm -v 'SHA-256-FIPS'
- ```
+1. If you use Ambari to manage your HAWQ cluster:
-3. Verify the setting:
-
- ``` bash
- $ hawq config -s
- ```
+ 1. Set the `password_hash_algorithm` configuration property via the
HAWQ service **Configs > Advanced > Custom hawq-site** drop down. Valid values
include `SHA-256` \(or `SHA-256-FIPS` to use the FIPS-compliant libraries for
SHA-256\).
+ 2. Select **Service Actions > Restart All** to load the updated
configuration.
+2. If you manage your HAWQ cluster from the command line:
--- End diff --
Same here - make this a plain paragraph rather than a numbered step.
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---
