Support Questions

Find answers, ask questions, and share your expertise

rules for creating password in hadoop. Are their ,rules for creating password in hadoop.

avatar
New Contributor

Are their any rules or limitations while creating password in hadoop cluster. If yes, is their any documentation available for the same.

1 ACCEPTED SOLUTION

avatar
Super Collaborator

@Himanshi Gidwani

Could you please clarify on what passwords you are referring here? We dont have any password authentication for hadoop(HDFS/YARN/MR). What ever user authenticated on client host(where executing hdfs command) will be the user accessing hadoop services. (Using kerberos is regular practise to configure authentication on hadoop)

View solution in original post

6 REPLIES 6

avatar
Super Collaborator

@Himanshi Gidwani

Could you please clarify on what passwords you are referring here? We dont have any password authentication for hadoop(HDFS/YARN/MR). What ever user authenticated on client host(where executing hdfs command) will be the user accessing hadoop services. (Using kerberos is regular practise to configure authentication on hadoop)

avatar
New Contributor

@rguruvannagari

I want to create on a kerberos hadoop cluster. Do we have rules for that?

like not adding a paranthesis or something?

avatar
Super Collaborator
@Himanshi Gidwani

hadoop doesnt enforce any rules, if using AD for kerberos, usually password policies are set in AD. No such requirement from hadoop end. We just need a principal created in AD/KDC. Only recommendation is to set "password never expire" for the service account created in AD.

avatar
New Contributor

avatar
New Contributor
@Himanshi Gidwani

The only limitation i ran into so far was the password of my LDAP Manager / Bind user within Apache Ranger UserSync.

I got the following error message after I applied the correct AD Settings to UserSync:

resource_management.core.exceptions.Fail:
LDAP/AD bind password contains one of the unsupported special characters like
" ' \ `

avatar
New Contributor

I'm having a similar issue with the YARN clients in my cluster. When the password is set in Ambari and it has a special character of ">" the YARN Client interprets it as "&gt". 
Example:
Set passwd -  ba(PxO463$bd;>
Passwd in the yarn core-site.xml
lx963:/usr/hdp/2.6.5.0-292/hadoop-yarn/etc/hadoop #grep PxO463$bd core-site.xml
<value>ba(PxO463$bd;&gt;</value>
<value>ba(PxO463$bd;&gt;</value>

Is there a workaround or fix for this?

James Yarnell