rules for creating password in hadoop. Are their ,rules for creating password in hadoop.

[#1]

Are their any rules or limitations while creating password in hadoop cluster. If yes, is their any documentation available for the same.

[#2 · Accepted solution]

@Himanshi Gidwani

Could you please clarify on what passwords you are referring here? We dont have any password authentication for hadoop(HDFS/YARN/MR). What ever user authenticated on client host(where executing hdfs command) will be the user accessing hadoop services. (Using kerberos is regular practise to configure authentication on hadoop)

[#3]

@rguruvannagari

I want to create on a kerberos hadoop cluster. Do we have rules for that?

like not adding a paranthesis or something?

[#4]

@Himanshi Gidwani

hadoop doesnt enforce any rules, if using AD for kerberos, usually password policies are set in AD. No such requirement from hadoop end. We just need a principal created in AD/KDC. Only recommendation is to set "password never expire" for the service account created in AD.

[#5]

@rguruvannagari

thanks

[#6]

@Himanshi Gidwani

The only limitation i ran into so far was the password of my LDAP Manager / Bind user within Apache Ranger UserSync.

I got the following error message after I applied the correct AD Settings to UserSync:

resource_management.core.exceptions.Fail:
LDAP/AD bind password contains one of the unsupported special characters like
" ' \ `

[#7]

I'm having a similar issue with the YARN clients in my cluster. When the password is set in Ambari and it has a special character of ">" the YARN Client interprets it as "&gt". 
Example:
Set passwd -  ba(PxO463$bd;>
Passwd in the yarn core-site.xml
lx963:/usr/hdp/2.6.5.0-292/hadoop-yarn/etc/hadoop #grep PxO463$bd core-site.xml
<value>ba(PxO463$bd;&gt;</value>
<value>ba(PxO463$bd;&gt;</value>

Is there a workaround or fix for this?