[
https://issues.apache.org/jira/browse/AMBARI-23311?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16413376#comment-16413376
]
Sandor Molnar edited comment on AMBARI-23311 at 3/26/18 9:52 AM:
-----------------------------------------------------------------
Hi [~rlevas],
the tool can either enable or disable SSO configuration from Ambari based on
the output of the following question:
{code:java}
Do you want to configure SSO authentication [y/n] (y)?
{code}
I do not understand what is the purpose of the 2nd question:
{code:java}
Manage SSO for installed services [y/n] (n)?
{code}
If the answer for the first question is set to 'y' does not that mean we want
to manage SSO for installed services?
I understand that I need to modify the patch I sent in last Friday to set the
_sso-configuration/ambari.sso.manage_services_ property but I'm not sure if we
need that 2nd question. What I mean is that we currently set
_authentication.jwt.enabled_ to _true_ in _ambari.properties_ when enabling SSO
(and we set it to _false_ when disabling the functionality); we could set the
new variable in the DB too (later on, when we move all SSO related
configuration to DB, we'll remove the _authentication.jwt.enabled_ anyway).
Please clarify.
Thanks!
was (Author: smolnar):
Hi [~rlevas],
the tool can either enable or disable SSO configuration from Ambari based on
the output of the following question:
{code:java}
Do you want to configure SSO authentication [y/n] (y)?
{code}
I do not understand what is the purpose of the 2nd question:
{code:java}
Manage SSO for installed services [y/n] (n)?
{code}
If the answer for the first question is set to 'y' does not that mean we want
to manage SSO for installed services?
I understand that I need to modify the patch I sent in last Friday to set the
_sso-configuration/ambari.sso.manage_services_ property but I'm not sure if we
need that 2nd question. Please clarify.
Thanks!
> Use Ambari CLI to specify which services should be setup for SSO integration
> ----------------------------------------------------------------------------
>
> Key: AMBARI-23311
> URL: https://issues.apache.org/jira/browse/AMBARI-23311
> Project: Ambari
> Issue Type: Task
> Components: ambari-server
> Affects Versions: 2.7.0
> Reporter: Sandor Molnar
> Assignee: Sandor Molnar
> Priority: Major
> Labels: pull-request-available, security, sso
> Fix For: 2.7.0
>
> Time Spent: 50m
> Remaining Estimate: 0h
>
> Use Ambari CLI to specify which services should be setup for SSO integration.
> {noformat:title=Example}
> # ambari-server setup-sso
> Using python /usr/bin/python
> Setting up SSO authentication properties...
> Do you want to configure SSO authentication [y/n] (y)?y
> Enter Ambari Admin login: admin
> Enter Ambari Admin password: admin
> Provider URL [URL] (http://example.com):http://knox.ambari.apache.org:8080
> Public Certificate pem (stored) (empty line to finish input):
> AAAAB3NzaC1yc2EAAAADAQABAAABAQD....
> Manage SSO for installed services [y/n] (n)? y
> Use SSO for all services [y/n] (y)? n
> Use SSO for Ambari [y/n] (y)? y
> Use SSO for HDFS [y/n] (y)? y
> Use SSO for YARN [y/n] (y)? y
> ...
> Use SSO for ZOOKEEPER [y/n] (y)? n
> Do you want to configure advanced properties [y/n] (n) ?
> Ambari Server 'setup-sso' completed successfully.
> {noformat}
> NOTE: this will require obtaining an Ambari administrator username and
> password to GET, PUT, and POST to the Ambari REST API.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
