How to Unlock a Denodo Administrator User in a Container Environment

You can translate the document:

Content

In Denodo Virtual DataPort (VDP), a recovery user can be created to gain access to the VDP server if, for example, all administrator users have been locked or their password forgotten. To achieve this, the property userRecoveryOnStartup must be manually added to the VDP server configuration file <DENODO_HOME>/conf/vdp/VDBConfiguration.properties and the server restarted.

userRecoveryOnStartup=<recovery_user_password>

In a container environment this approach might not be valid because the modifications performed in the instance files are not persisted. Instead, a script to add the property could be placed under /container-entrypoint-preinit which will be mounted as a volume and executed when the container starts.

To create the recovery user in a container environment follow this steps:

  • Create a script called enableRecoveryUser.sh with the following content:

#!/bin/bash

echo "userRecoveryOnStartup=<recovery_user_password>" >> "$DENODO_CONF_DIR/vdp/VDBConfiguration.properties"

  • Run the container with a volume, for example if using Docker:

docker run -d -h denodo-vdpserver  -p 9999:9999 -p 9997:9997 -p 9996:9996 -p 9995:9995 -p 9090:9090  -p 9098:9098 -p 8000:8000 -p 9000:9000 -v /<path_to_license>/denodo.lic:/opt/denodo/conf/denodo.lic -v /<path_to_script>/enableRecoveryUser.sh:/container-entrypoint-preinit/enableRecoveryUser.sh --name denodo-vdpserver <image> --vdpserver

  • Log in with the recovery user denodo_recovery_user and with the password entered in the script and unlock an administrator account.
  • Remove the script enableRecoveryUser.sh.

References

Denodo Docker container configuration

Password Policies in the Denodo Platform and Solution Manager

Disclaimer

The information provided in the Denodo Knowledge Base is intended to assist our users in advanced uses of Denodo. Please note that the results from the application of processes and configurations detailed in these documents may vary depending on your specific environment. Use them at your own discretion.

For an official guide of supported features, please refer to the User Manuals. For questions on critical systems or complex environments we recommend you to contact your Denodo Customer Success Manager.
Recommendation

Recommended resources Recommendations generated by AI

Denodo Docker container configuration

Deploying the Denodo Solution Manager in Kubernetes

How to create your own Docker images for Denodo Platform Containers

How to connect to Denodo VDP when only port 443 is allowed

LDAP authentication best practices

Questions

Ask a question

You must sign in to ask a question. If you do not have an account, you can register here