Generate encrypted passwords manually

DrissiReda

I'm trying to set up automatic configuration in my dataiku instance. I can do that through overwriting the files in "dss_dir/config".

One issue I'm currently having is how to generate encrypted passwords, for example in the connections file we have:

This is "password"

e:AES:X2:H6n1ldTXlVeLUBMqrPi1anV6EoHQV1zicSRYWXASLpTQcWzg1fk+SXmpoHDt2IYdokuw7eWKeas=

What algorithm/binary can I use to generate this? Ideally I'd like to do it in python because it's what dss uses.

For users.json for example it would be a different one:

This is "password"

pbkdf2:10000:3795535011a99f7e:93e384bcd6b3fd1c752b7e907dea542add43774f05ef718045a52e75834250e6e5d032d099dffa507b103ce53b6f427afe509b705c01d15714b0bf943b8b1500

Sergey

Hi @DrissiReda

We don't have a binary that has the functionality to encrypt using pbkdf2. That is done internally in DSS only.

For user creation you might want to have a look at python APIs:

https://doc.dataiku.com/dss/latest/python-api/users-groups.html#a-local-user-with-a-password

or dsscli utility:

https://doc.dataiku.com/dss/latest/operations/dsscli.html#user-create

Hope this can cover your needs. Thanks.

Sergey

Hi @DrissiReda

You can use dku utility for that:

./bin/dku encrypt-password <password>

The encrypted password will be output as the line started by "e:AES:........"

What about the algorithm, you can find more info here: https://doc.dataiku.com/dss/latest/security/passwords-security.html

DrissiReda

Thanks but I can't see how to do that for pbkdf2

DrissiReda

Thank you very much that works perfectly for me. One last point, any possible way I can "Install Jupyter Kernels" from cli? It's an option inside the containerized execution plugin.

Sergey

hi @DrissiReda

I am not sure about what option you are talking about in EKS/AKS/GKE plugins, but there is a high chance as this is going to work only from UI as plugins don't usually have APIs.

DrissiReda

It's not a plugin, but thanks to logs I realized how to do what I wanted. It just creates a kernel.json file under dss/jupyter-run/kernels/py-dku-containerized-venv--<containerized_exec_conf_name>/

Tanguy

@Sergey : is it possible to do this:

You can use dku utility for that:

./bin/dku encrypt-password <password>

via the dataiku api client ? Otherwise, will this functionality be possible in the future?

Tanguy

FYI I have found a workaround for my usecase.