question Re: rules for creating password in hadoop. Are their ,rules for creating password in hadoop. in Support Questions

rules for creating password in hadoop. Are their ,rules for creating password in hadoop.

himanshi_gidwan — Wed, 03 May 2017 13:30:44 GMT

Are their any rules or limitations while creating password in hadoop cluster. If yes, is their any documentation available for the same.

Re: rules for creating password in hadoop. Are their ,rules for creating password in hadoop.

rguruvannagari — Wed, 03 May 2017 14:14:55 GMT

@Himanshi Gidwani

Could you please clarify on what passwords you are referring here? We dont have any password authentication for hadoop(HDFS/YARN/MR). What ever user authenticated on client host(where executing hdfs command) will be the user accessing hadoop services. (Using kerberos is regular practise to configure authentication on hadoop)

Re: rules for creating password in hadoop. Are their ,rules for creating password in hadoop.

himanshi_gidwan — Wed, 03 May 2017 14:23:40 GMT

@rguruvannagari

I want to create on a kerberos hadoop cluster. Do we have rules for that?

like not adding a paranthesis or something?

Re: rules for creating password in hadoop. Are their ,rules for creating password in hadoop.

rguruvannagari — Wed, 03 May 2017 15:06:01 GMT

@Himanshi Gidwani

hadoop doesnt enforce any rules, if using AD for kerberos, usually password policies are set in AD. No such requirement from hadoop end. We just need a principal created in AD/KDC. Only recommendation is to set "password never expire" for the service account created in AD.

Re: rules for creating password in hadoop. Are their ,rules for creating password in hadoop.

himanshi_gidwan — Wed, 03 May 2017 15:20:56 GMT

@rguruvannagari

thanks

Re: rules for creating password in hadoop. Are their ,rules for creating password in hadoop.

christian_w_m_d — Thu, 12 Jul 2018 18:06:37 GMT

@Himanshi Gidwani

The only limitation i ran into so far was the password of my LDAP Manager / Bind user within Apache Ranger UserSync.

I got the following error message after I applied the correct AD Settings to UserSync:

resource_management.core.exceptions.Fail:
LDAP/AD bind password contains one of the unsupported special characters like
" ' \ `

Re: rules for creating password in hadoop. Are their ,rules for creating password in hadoop.

Jimmi_Omaha — Thu, 21 Nov 2019 14:41:40 GMT

I'm having a similar issue with the YARN clients in my cluster. When the password is set in Ambari and it has a special character of ">" the YARN Client interprets it as "&gt".
Example:
Set passwd - ba(PxO463$bd;>
Passwd in the yarn core-site.xml
lx963:/usr/hdp/2.6.5.0-292/hadoop-yarn/etc/hadoop #grep PxO463$bd core-site.xml
<value>ba(PxO463$bd;></value>
<value>ba(PxO463$bd;></value>

Is there a workaround or fix for this?