[AMBARI-23213] Enable or disable SSO using Ambari CLI with options

• Type: Task
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.7.0
• Fix Version/s: 2.7.0
• Component/s: ambari-server
• Labels: SSO pull-request-available security
• Epic Link: Setup SSO via Ambari CLI
• Assignee: Sandor Molnar
• Reporter: Sandor Molnar
• Created: 12/Mar/18 20:30
• Updated: 24/Mar/18 10:44
• Resolved: 20/Mar/18 14:02

Description

To enable or disable SSO using the Ambari CLI, the user needs to answer each prompt. This is not convenient for automated tools. So the following command line options should be available for use. If any mandatory option is not specified via the command line, the user should be prompted for a value.

Global SSO options:

• --sso-enabled

if sso-enabled is "true":

• --sso-provider-url
• --sso-public-cert-file
• --sso-jwt-cookie-name
  • optional, if not supplied, the documented default value will be used
• --sso-jwt-audience-list
  • optional, if not supplied, the documented default value will be used

Examples

ambari-server setup-sso --help

ambari-server setup-sso --sso-enabled=true --sso-provider-url=https://knox.ambari.apache.org:8443 --sso-public-cert-file=/tmp/sso.pem

ambari-server setup-sso --sso-enabled=true --sso-provider-url=https://knox.ambari.apache.org:8443 --sso-public-cert-file=/tmp/sso.pem --sso-jwt-cookie-name=ambari-jtw 

ambari-server setup-sso --sso-enabled=true --sso-provider-url=https://knox.ambari.apache.org:8443 --sso-public-cert-file=/tmp/sso.pem --sso-jwt-cookie-name=ambari-jtw --sso-jwt-audience-list=ambari

ambari-server setup-sso --sso-enabled=true --sso-provider-url=https://knox.ambari.apache.org:8443 --sso-public-cert-file=/tmp/sso.pem

ambari-server setup-sso --sso-enabled=false

Issue Links

• links to: GitHub Pull Request #665