Generate encrypted passwords manually

Solved!
DrissiReda
Level 4
Generate encrypted passwords manually

I'm trying to set up automatic configuration in my dataiku instance. I can do that through overwriting the files in "dss_dir/config".

 

One issue I'm currently having is how to generate encrypted passwords, for example in the connections file we have:

This is "password"

e:AES:X2:H6n1ldTXlVeLUBMqrPi1anV6EoHQV1zicSRYWXASLpTQcWzg1fk+SXmpoHDt2IYdokuw7eWKeas=

 

What algorithm/binary can I use to generate this? Ideally I'd like to do it in python because it's what dss uses.

 

For users.json for example it would be a different one:

 

This is "password"

 

pbkdf2:10000:3795535011a99f7e:93e384bcd6b3fd1c752b7e907dea542add43774f05ef718045a52e75834250e6e5d032d099dffa507b103ce53b6f427afe509b705c01d15714b0bf943b8b1500
0 Kudos
1 Solution
sergeyd
Dataiker

Hi @DrissiReda 

We don't have a binary that has the functionality to encrypt using pbkdf2. That is done internally in DSS only. 

For user creation you might want to have a look at python APIs:

https://doc.dataiku.com/dss/latest/python-api/users-groups.html#a-local-user-with-a-password

or dsscli utility: 

https://doc.dataiku.com/dss/latest/operations/dsscli.html#user-create

Hope this can cover your needs. Thanks. 

View solution in original post

6 Replies
sergeyd
Dataiker

Hi @DrissiReda 

You can use dku utility for that: 

./bin/dku encrypt-password <password>

The encrypted password will be output as the line started by "e:AES:........"

What about the algorithm, you can find more info here: https://doc.dataiku.com/dss/latest/security/passwords-security.html

 

0 Kudos
DrissiReda
Level 4
Author

Thanks but I can't see how to do that for pbkdf2

0 Kudos
sergeyd
Dataiker

Hi @DrissiReda 

We don't have a binary that has the functionality to encrypt using pbkdf2. That is done internally in DSS only. 

For user creation you might want to have a look at python APIs:

https://doc.dataiku.com/dss/latest/python-api/users-groups.html#a-local-user-with-a-password

or dsscli utility: 

https://doc.dataiku.com/dss/latest/operations/dsscli.html#user-create

Hope this can cover your needs. Thanks. 

DrissiReda
Level 4
Author

Thank you very much that works perfectly for me. One last point, any possible way I can "Install Jupyter Kernels" from cli? It's an option inside the containerized execution plugin.

0 Kudos
sergeyd
Dataiker

hi @DrissiReda 

I am not sure about what option you are talking about in EKS/AKS/GKE plugins, but there is a high chance as this is going to work only from UI as plugins don't usually have APIs. 

0 Kudos
DrissiReda
Level 4
Author

It's not a plugin, but thanks to logs I realized how to do what I wanted. It just creates a kernel.json file under dss/jupyter-run/kernels/py-dku-containerized-venv--<containerized_exec_conf_name>/