> On July 7, 2016, 8:19 p.m., Srimanth Gunturi wrote: > > ambari-server/src/main/resources/common-services/RANGER/0.4.0/package/scripts/ranger_admin.py, > > line 56 > > <https://reviews.apache.org/r/49752/diff/1/?file=1438640#file1438640line56> > > > > Is changing password supported only during install? After install if > > this password changes, do we need to re-invoke this method?
Srimanth - Current plan is to support password change only during install. After that, password change needs to be done at Ranger end and config needs to be updated manually via Ambari (this is the current behavior though, so there is no change here). If passwords are not in sync, Ambari provided alert should continue to work. - Velmurugan ----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/49752/#review141209 ----------------------------------------------------------- On July 7, 2016, 12:54 p.m., Mugdha Varadkar wrote: > > ----------------------------------------------------------- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/49752/ > ----------------------------------------------------------- > > (Updated July 7, 2016, 12:54 p.m.) > > > Review request for Ambari, Alejandro Fernandez, Andrew Onischuk, Gautam > Borad, Jonathan Hurley, Jayush Luniya, Srimanth Gunturi, and Velmurugan > Periasamy. > > > Bugs: AMBARI-17000 > https://issues.apache.org/jira/browse/AMBARI-17000 > > > Repository: ambari > > > Description > ------- > > Problem: > Today when a cluster is created, ranger admin has the default password. Since > ranger defines all the authorization related policies, the first thing user > needs to do after creating a cluster is to change ranger admin default login > password in Ambari and Ranger manually. > > > Solution: > Update ranger admin password only at time of installation if password doesn't > match with default password. > > Executing below command: > python db_setup.py -changepassword userID, currentPassword, newPassword. > > This script if called multiple time wont change password on subsequent calls, > since a flag is maintained in the db. The flag is set on first password > change and wont allow further password change(using this script) > Also the password change will work in HA environment since it maintains a > lock in db before updating the record. > > > Diffs > ----- > > > ambari-common/src/main/python/resource_management/libraries/functions/constants.py > 85e04e7 > > ambari-server/src/main/resources/common-services/RANGER/0.4.0/package/scripts/params.py > a85bde0 > > ambari-server/src/main/resources/common-services/RANGER/0.4.0/package/scripts/ranger_admin.py > c6e5b70 > > ambari-server/src/main/resources/common-services/RANGER/0.4.0/package/scripts/setup_ranger_xml.py > 6b04075 > > ambari-server/src/main/resources/stacks/HDP/2.0.6/properties/stack_features.json > ca000d1 > > Diff: https://reviews.apache.org/r/49752/diff/ > > > Testing > ------- > > Ran 261 tests in 7.602s > > OK > ---------------------------------------------------------------------- > Total run:1015 > Total errors:0 > Total failures:0 > OK > > > Thanks, > > Mugdha Varadkar > >
