Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

Changing Password for HDFS service user

Highlighted

Changing Password for HDFS service user

if i change the passoword for hdfs service account ,will if affect any of the services like hdfs,yarn,hbase,hive...

 

 

4 REPLIES 4
Highlighted

Re: Changing Password for HDFS service user

Moderator

Hi @sah_abdulrahman,

 

Thank you for reaching out to Cloudera Community!

 

To better assist you with this issue, it would be great if you could please help to provide the following additional information:

1) Is the cluster on which you are planning to change password is kerberized ?

2) Do you use CM or Ambari for managing your cluster? 


Madhuri Adipudi, Technical Solutions Manager

Was your question answered? Make sure to mark the answer as the accepted solution.
If you find a reply useful, say thanks by clicking on the thumbs up button.

Learn more about the Cloudera Community:

Highlighted

Re: Changing Password for HDFS service user

Hi @Madhur ,

 

Thanks for responding ..!!

1) Is the cluster on which you are planning to change password is kerberized ?

yes the cluster is kerberized 

2)

2) Do you use CM or Ambari for managing your cluster? 

I use Ambari for Managing the cluster 
 
Highlighted

Re: Changing Password for HDFS service user

Cloudera Employee

Hello @sah_abdulrahman 

 

Please refer the below community post to do the needful

 

https://community.cloudera.com/t5/Support-Questions/How-to-change-HDP-service-users-password/m-p/236...

 

Thank you,

Tarun

 

Was your question answered? Make sure to mark the answer as the accepted solution.
If you find a reply useful, say thanks by clicking on the thumbs up button.

Re: Changing Password for HDFS service user

Moderator

Hello @sah_abdulrahman ,

 

what are the impacts of changing service account password in kerberized cluster ?

 

Service accounts like  hdfs, hbase, spark, etc. password rely on keytabs. It has principals which look like any other normal user principal but they do rely on having valid keytabs around. If the passwords for these service accounts expire/ change  then you will need to re-generate keytabs for them once the password is updated. You can re-generate these keytabs in Ambari by going to the Kerberos screen and pressing the "Regenerate Keytabs" button. This will also automatically distribute the keytabs where they are needed. Note it's always best to restart the cluster when you do this.

 

NOTE:- for better smoothness of this process please try changing password for one service account followed by service restart and observe if any impact is there and then proceed for other Service Accounts.

 

To answer your question, changing the password of the service accounts would not affect the running services since the passwords are not used to start the service. Hence passwords are not required during the service startup or during the life time of process.

 

 


Madhuri Adipudi, Technical Solutions Manager

Was your question answered? Make sure to mark the answer as the accepted solution.
If you find a reply useful, say thanks by clicking on the thumbs up button.

Learn more about the Cloudera Community:

Don't have an account?
Coming from Hortonworks? Activate your account here