[AMBARI-23622] JWT cookie name and audiences not queried for during ambari-server setup-sso

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.7.0
• Fix Version/s: 2.7.0
• Component/s: ambari-server
• Labels: pull-request-available
• Epic Link: Setup SSO via Ambari CLI
• Assignee: Robert Levas
• Reporter: Robert Levas
• Created: 19/Apr/18 12:10
• Updated: 19/Apr/18 17:27
• Resolved: 19/Apr/18 17:16

Description

JWT cookie name and audiences not queried for during ambari-server setup-sso

Example:

[root@c7401 ~]# ambari-server setup-sso
Using python  /usr/bin/python
Setting up SSO authentication properties...
Enter Ambari Admin login: admin
Enter Ambari Admin password:

SSO is currently not configured
Do you want to configure SSO authentication [y/n] (y)? y
Provider URL (https://knox.example.com:8443/gateway/knoxsso/api/v1/websso):https://c7401.ambari.apache.org:8443/gateway/knoxsso/api/v1/websso
Public Certificate PEM (empty line to finish input):
MIICVTCCAb6gAwIBAgIILf1Tx+q3QEMwDQYJKoZIhvcNAQEFBQAwbTELMAkGA1UE
...
6crsjbE33yYbJ1mZCpLGtM7mCj0liitItA==

Use SSO for all services [y/n] (n):
Use SSO for AMBARI [y/n] (y):
Use SSO for ATLAS [y/n] (y):
Use SSO for RANGER [y/n] (y): n
Ambari Server 'setup-sso' completed successfully.

The following queries are expected before setup is complete:

JWT Cookie name (hadoop-jwt):
JWT audiences list (comma-separated), empty for any ():

Issue Links

• links to: GitHub Pull Request #1049