Configure basic authentication
Configure Basic authentication to enable password-based authentication for the Data Migrator and Hivemigrator API.
You'll need to configure the same user password combination for Data Migrator and Hivemigrator in each component's properties file, and update your UI with the new credentials.
- Complete the configuration for both components, Data Migrator and Hivemigrator.
- Use the same username and password combination for Data Migrator and Hivemigrator.
- Use an unencrypted password for
hivemigrator.integration.liveDataMigrator.password
. - Provide the UI with the basic auth credentials so it can access the protected endpoints.
Enable Basic authentication (Data Migrator)
Use the following steps to enable basic authentication on the Data Migrator API:
Open
/etc/wandisco/livedata-migrator/application.properties
in a text editor.Comment out
security.type=off
.#security.type=off
Uncomment the following security parameters to make them apply.
security.type=basic
security.basic.user=admin
security.basic.password={bcrypt}$2a$10$kXzfqwiiCY/ZW9e9BboNmuIbe5xe2kNjdk1YNUxmsCaQ7PlBLCe4WThe default username is
admin
. If you provide your own username, it must not include empty spaces.noteTo allow the UI to connect successfully, use the same username and password combination for Data Migrator and Hivemigrator.
Replace the example
security.basic.password
with your own bcrypt-encrypted password. Paste your encrypted password hash after the prefix{bcrypt}
.Save and close the file.
Restart the Data Migrator service. See System service commands.
When basic authentication is enabled, enter the username and password when prompted to connect to Data Migrator with the CLI.
Enable Basic authentication (Hivemigrator)
Use the following steps to enable basic authentication on the Hivemigrator API:
Open
/etc/wandisco/hivemigrator/application.properties
.Under the security section, ensure
micronaut.security.enabled
is "true".micronaut.security.enabled=true
Under Credentials used for REST authentication, uncomment and complete the
hivemigrator.username
andhivemigrator.password
properties.Examplehivemigrator.username=admin
hivemigrator.password=$2aBCRYPTPASSWORDSTRING.eMyOt67yEM6TVkz1qeIxDMfaCnI8SjFaRUyThe
hivemigrator.password
string must be encrypted using a bcrypt generator that provides a "2a" prefix at the beginning of the encrypted password. Use the same password hash as Data Migrator but the "{bcrypt}" prefix is not required.noteTo allow the UI to connect successfully, use the same username and password combination for Data Migrator and Hivemigrator.
Under Integration with LDM, uncomment and complete the
hivemigrator.integration.liveDataMigrator.username
andhivemigrator.integration.liveDataMigrator.password
properties.Examplehivemigrator.integration.liveDataMigrator.username=<matching-data-migrator-username>
hivemigrator.integration.liveDataMigrator.password=<matching-data-migrator-password>Use the unencrypted password for
hivemigrator.integration.liveDataMigrator.password
.
These credentials are used by Hivemigrator to communicate with Data Migrator, so they must match the credentials used for Data Migrator.
- Restart the Hivemigrator service. See System service commands.
When basic authentication is enabled, enter the username and password when prompted to connect to Hivemigrator with the CLI.
Update UI with basic auth credentials
After you've enabled Basic authentication on the Data Migrator and Hivemigrator API's, the UI will report both as unhealthy and disconnected until you provide the UI with the credentials.
Use the following steps to set UI basic auth credentials through the UI:
- Sign in to the UI and select the Dashboard on the menu.
- Select your existing instance from the Products panel.
- Select the LiveData Migrator option from the Configuration Menu.
- Select Remove. When asked to confirm the removal, select Remove. The Data Migrator instance has now been removed.note
Data Migrator comes preconfigured with an instance running on localhost. To remove the preconfigured instance see the Remove Data Migrators steps.
- Select the plus in the corner of the Products panel.
- Enter your Data Migrator details, including new basic auth credentials.
- Select Connect.
Repeatedly selecting the Remove button may cause the operation or the UI to hang.
In some cases, the Data Migrator configuration option for removing a Data Migrator instance may take much longer than expected. Repeatedly selecting the Remove button may cause the operation or the UI to hang. See the following knowledge base article - known issue.