I'm using Hortonworks sandbox. I cannot login to the hue using port 8000 since I don't know the password. Can some one tell me the default password and username for hue?
I've faced the same problem regarding users on hue platform. As this link says http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.4/bk_installing_manually_book/content/configure_hue.html:
By default, the first user who logs in to Hue can choose any username
and password and gets the administrator privileges. This user can
create other user and administrator accounts. User information is
stored in the Django database in the Django backend
So for user management, you have to interact with Django backend. Changing the password for user hue can be done with the following steps:
login to hortonwork sandbox
go to /usr/lib/hue (base directory for hue platform)
execute build/env/bin/hue shell within that directory (that will enter you in the python console)
Execute the following python code:
from django.contrib.auth.models import User
user = User.objects.get(username='hue')
user.set_password('admin')
user.save()
That will change your hue's password to admin. More information can be found in this link http://gethue.com/password-management-in-hue/
Go to the Hortonworks sandbox homepage using the ipaddress and click on the 'close Advanced Options'. You will find all the default credentials there.
Related
Due to some data related issues,I imported dev database to my local database that is running via docker however I am not able to login a user with same credentials that are working on dev server/database. I noticed that fields like email etc are using rails encrypt database field.
I am not able to login user with same username password ,if some one knows what might be causing it and a solution to it,that would be wonderful. Thanks in advance.
I am trying to configure a project-based authorization matrix in Jenkins. All of the users are authenticated through the SAML 2.0 plugin which is functioning as expected. Users are added to an Active Directory group to get access to the server, and then assigned permissions using the matrix. What I would like to do, is have the Authenticated Users group serve as a baseline for what all logged in users are permitted to do, and then grant administrative access to a few Active Directory users who will have Admin privileges. However, only 2 out of the 8 users granted Admin privileges in the Matrix (underlined in blue) are able to see the "Manage Jenkins" button in their portal, while the other 6 users (underlined in red) are unable to see Manage Jenkins. All 8 users are in the same AD group and there are no discernible differences among these 8 users. auth matrix
Jenkins version is 2.289.1 running on Red Hat Enterprise Linux
I figured out the that the problem was with Jenkins' config.xml file which Jenkins uses to configure global security. Some users were stored in the format "Firstname, Lastname", while others were stored as their email address. In the Jenkins UI, it will display users as "Firstname, Lastname", but it uses the email address to identify them on the back end. I manually edited the file and replaced all of the user's names with their email addresses. I then ran sudo systemctl restart jenkins and allowed me to assign permissions to those users.
We are creating an app that has a feature to reset their password respectively, since we are using keycloak so that thing will be featured via keycloak page itself, but our client need the forgot password will be provided in the app, so i need to hit the forgot password api like below flow.
App Forgot Password Page > Fill email only and proceed > User receive reset password link > Open link > Keycloak reset password page
But seems that api is not existed in the keycloak.
As far i only found below apis
PUT /{realm}/users/{id}/reset-password (need bearer, not possible since we are unable to use realm account user)
PUT /{realm}/users/{id}/execute-actions-email (don't know how to use it and need bearer, not possible since we are unable to use realm account user)
Any suggestion?
Thank you in advance
Hi there, this is 2021, my solution at this time was by using keycloak library in java service, so the service working as aggregator between my web app to keycloak, and still we are using above apis mentioned that need realm access. Good luck.
You can set required action for the user to UPDATE_PASSWORD and when user tries to log in, they will be prompted with Setting up their password.
Keycloak Admin APIs - UserResource
You can update the user and in the UserRepresentation you can set that required action.
Let's say an application is already running with elevated privileges.
Is it possible for this application to show a UAC prompt and get its result (successfully confirmed or cancelled)?
Background story: I have an application that requires Administrator privileges but runs in a restricted user account, so an UAC prompt is shown at its start, the user enters Administrator credentials to confirm it and everything works fine. However, for some critical actions I'd like to verify that the current user is (still) allowed to do that.
For example, the original user left the workstation without locking his Windows account (yes, the world's not perfect...) and another user open that already running application and accesses some sensitive settings.
You can compare this to an online-shop, where an already logged in user has to provide his credentials again if he wants to change his delivery address.
I understand that I could create a custom prompt, ask for admin account credentials and check if they're valid, but I don't want to touch those credentials at all. Neither do I want to introduce additional application-specific credentials. The UAC prompt would be a nice and native solution to re-verify the user has admin privileges.
Basically something like this:
if VerifyAdminWithUacPrompt then
begin
//critical stuff
end;
A Delphi example would be perfect, but I'm also happy about general ideas how to accomplish this.
Your app does not need to invoke a new UAC prompt, since UAC is already running your app elevated. The app just needs to ask the user for credentials. Windows has APIs for that very purpose: CredUIPromptForCredentials() and CredUIPromptForWindowsCredentials():
The CredUIPromptForCredentials function creates and displays a configurable dialog box that accepts credentials information from a user.
The CredUIPromptForWindowsCredentials function creates and displays a configurable dialog box that allows users to supply credential information by using any credential provider installed on the local computer.
See Asking the User for Credentials on MSDN for more details:
Your application may need to prompt the user for user name and password information to avoid storing an administrator password or to verify that the token holds the appropriate privileges.
However, simply prompting for credentials may train users to supply those to any random, unidentified dialog box that appears on the screen. The following procedure is recommended to reduce that training effect.
To properly acquire user credentials
Inform the user, by using a message that is clearly part of your application, that they will see a dialog box that requests their user name and password. You can also use the CREDUI_INFO structure on the call to CredUIPromptForCredentials to convey identifying data or a message.
Call CredUIPromptForCredentials. Note that the maximum number of characters specified for user name and password information includes the terminating null character.
Call CredUIParseUserName and CredUIConfirmCredentials to verify that you obtained appropriate credentials.
While sharing drive to run Linux containers, Docker comes up with a login prompt. O365 Username is pre-filled AzureAD\(username given in c:\users\<username>).
I tried giving the password I logged in (0365 account). Tried changing username to logged-in username. Nothing works and it immediately goes back to the same AzureAD\<username> and prompts again (3 times)
I had logged in using O365 account. This did not allow me to provide access eventhough it was an admin user. But I had another login which was initially used to setup the windows 10 machine. When I used this login, I was able to provide access.