Configure basic auth
Basic auth enables password-based authentication for Data Migrator and Hive Migrator.
To configure basic authentication and allow the UI to connect successfully to the REST API endpoints:
- Complete the configuration for all components, Data Migrator, Hive Migrator, and UI.
- Use the same username and password combination for Data Migrator and Hive Migrator.
- Use an unencrypted password for
hivemigrator.integration.liveDataMigrator.password
.
Enable Basic authentication (Data Migrator)
Use the following steps to enable basic auth:
Open
/etc/wandisco/livedata-migrator/application.properties
in a text editor.Comment out
security.type=off
.#security.type=off
Uncomment the following security parameters to make them apply.
security.type=basic
security.basic.user=admin
security.basic.password={bcrypt}$2a$10$kXzfqwiiCY/ZW9e9BboNmuIbe5xe2kNjdk1YNUxmsCaQ7PlBLCe4WThe default username is
admin
. If you provide your own username, it must not include empty spaces.noteTo allow the UI to connect successfully, use the same username and password combination for Data Migrator and Hive Migrator.
Replace the example
security.basic.password
with your own bcrypt-encrypted password. Paste your password after the prefix{bcrypt}
.Save and close the file.
Restart the Data Migrator service. See System service commands.
When basic authentication is enabled, enter the username and password when prompted to connect to Data Migrator with the CLI.
Enable Basic authentication (Hive Migrator)
Use the following steps to enable basic authentication on the Hive Migrator REST API:
Open
/etc/wandisco/hivemigrator/application.properties
.Under the security section, ensure
micronaut.security.enabled
is "true".micronaut.security.enabled=true
Under Credentials used for REST authentication, uncomment and complete Hive Migrator user credentials
hivemigrator.username
andhivemigrator.password
. For example:hivemigrator.username=admin
hivemigrator.password=$2aBCRYPTPASSWORDSTRING.eMyOt67yEM6TVkz1qeIxDMfaCnI8SjFaRUyThe
hivemigrator.password
string must be encrypted using a bcrypt generator that provides a "2a" prefix at the beginning of the encrypted password.noteTo allow the UI to connect successfully, use the same username and password combination for Data Migrator and Hive Migrator.
Under Integration with LDM, uncomment and complete
hivemigrator.integration.liveDataMigrator.username
andhivemigrator.integration.liveDataMigrator.password
. For example:hivemigrator.integration.liveDataMigrator.username=<matching-data-migrator-username>
hivemigrator.integration.liveDataMigrator.password=<matching-data-migrator-password>Use an unencrypted password for
hivemigrator.integration.liveDataMigrator.password
.noteThese credentials are used by Hive Migrator to communicate with Data Migrator, so they must match the credentials used for Data Migrator.
Restart the Hive Migrator service. See System service commands.
When basic authentication is enabled, enter the username and password when prompted to connect to Hive Migrator with the CLI.
After updating the basic auth settings for Data Migrator and Hive Migrator, the UI will show both filesystems as unhealthy and disconnected. To make them healthy, update the basic auth setting in the UI or CLI, as described in the next section.
Update basic auth settings
Update your basic auth settings using the UI or CLI.
- UI
- CLI
Use the following steps to set UI basic auth credentials through the UI:
- Sign in to the UI and select the Dashboard on the menu.
- Select your existing instance from the Instances panel.
- Select the LiveData Migrator option from the Configuration Menu.
- Select Remove. When asked to confirm the removal, select Remove. The Data Migrator instance has now been removed.note
Data Migrator comes preconfigured with an instance running on localhost. To remove the preconfigured instance see the Remove Data Migrators steps.
- Select the plus in the corner of the Instances panel.
- Enter your Data Migrator details, including new basic auth credentials.
- Select Connect.
Repeatedly selecting the Remove button may cause the operation or the UI to hang.
In some cases, the Data Migrator configuration option for removing a Data Migrator instance may take much longer than expected. Repeatedly selecting the Remove button may cause the operation or the UI to hang. See the following knowledge base article - known issue.
Use the following steps to set UI basic auth credentials through the CLI:
Data Migrator
On the UI host, run the following command:
# livedata-ui encryptor
Select option
3. Setup LDM Basic Auth
.Enter unencrypted
username
andpassword
values that were defined for thesecurity.basic.user
andsecurity.basic.password
properties in theapplication.properties
file.Select the
Exit
option once complete.Restart all services to apply changes. See System service commands.
Hive Migrator
On the UI host, run the following command:
# livedata-ui encryptor
Select option
4. Setup HVM Basic Auth
.In plain text, enter the Hive Migrator
hivemigrator.username
andhivemigrator.password
values that appear in/etc/wandisco/hivemigrator/application.properties
.Select
Exit
.Restart the UI for the updates to take effect. See System service commands.