Help Center/ MapReduce Service/ User Guide/ MRS Cluster O&M/ MRS Cluster Security Configuration/ Changing the Passwords for System Users of an MRS Cluster/ Changing or Resetting the Password for User admin of an MRS Cluster
Updated on 2024-09-23 GMT+08:00
View PDF
Share

Changing or Resetting the Password for User admin of an MRS Cluster

User admin is the system administrator account of Manager. You are advised to periodically change the password by referring to Changing the Password of User admin to improve system security. If you forget the password, you can reset it by referring to Resetting the Password of User admin.

If the password is changed, the downloaded user credential will be unavailable. Download the authentication credential again, and replace the old one.

Changing the Password of User admin

Changing the password of user admin on Manager:

You can change the password for the user admin on Manager for clusters with Kerberos authentication enabled or clusters with Kerberos authentication disabled but with the EIP function enabled.

  1. Log in to Manager as user admin.

    • For MRS 2.x or earlier, click the username in the upper right corner of the page and choose Change Password.
    • For MRS 3.x or later, hover over Hello, admin in the upper right corner of the page and choose Change Password.

  2. On the Change Password page, set Old Password, New Password, and Confirm Password.

    The default password complexity requirements are as follows:

    • For MRS 2.x or earlier:
      • The password must contain at least eight characters.
      • The password must contain at least three types of the following: uppercase letters, lowercase letters, digits, spaces, and special characters ('~!@#$%^&*()-_=+\|[{}];:'",<.>/?).
      • The password cannot be the username or the reverse username.
    • MRS 3.x or later:
      • The password must contain at least eight characters.
      • The password must contain at least four types of the following: uppercase letters, lowercase letters, numbers, spaces, and special characters (~`!?,.;-_'(){}[]/<>@#$%^&*+|\=).
      • The password cannot be the same as the username or the username spelled backwards.
      • The password cannot be a common easily-cracked password.
      • The password cannot be the same as the password used in the last N times. N indicates the value of Repetition Rule in Configuring Password Policies for MRS Cluster Users.

  3. Click OK. Log in to Manager with the new password.

Changing the password of user admin on the cluster node (versions later than MRS 2.x):

  1. Update the client of the active management node. For details, see Updating the MRS Cluster Client After the Server Configuration Expires.
  2. Log in to the active management node.
  3. (Optional) To change the password as user omm, run the following command to switch the user:

    sudo su - omm

  4. Run the following command to switch to the client directory, for example, /opt/client.

    cd /opt/client

  5. Run the following command to configure environment variables:

    source bigdata_env

  6. Run the following command to change the password of user admin: This operation takes effect in the whole cluster.

    kpasswd admin

    Enter the old password and then enter a new password twice.

    For the cluster, the default password complexity requirements are as follows:
    • The password must contain at least eight characters.
    • The password must contain at least three types of the following: uppercase letters, lowercase letters, digits, spaces, and special characters ('~!@#$%^&*()-_=+\|[{}];:'",<.>/?).
    • The password cannot be the username or the reverse username.

Resetting the Password of User admin

  1. Log in to the Master1 node.
  2. (Optional) To change the password as user omm, run the following command to switch the user:

    sudo su - omm

  3. Go to the client directory.

    cd Client installation directory

  4. Run the following command to set environment variables:

    source bigdata_env

  5. Run the following command to log in to the console as user kadmin/admin:

    kadmin -p kadmin/admin

    The default password of user kadmin/admin is KAdmin@123 for MRS 2.x or earlier and Admin@123 for MRS 3.x or later. The system displays a message indicating that the password has expired upon the first login. Change the password as prompted. Keep the password secure as it cannot be retrieved once lost.

  6. Run the following command to reset the password of user admin:

    cpw admin

    For the cluster, the default password complexity requirements are as follows:
    • For MRS 2.x or earlier:
      • The password must contain at least eight characters.
      • The password must contain at least three types of the following: uppercase letters, lowercase letters, digits, spaces, and special characters ('~!@#$%^&*()-_=+\|[{}];:'",<.>/?).
      • The password cannot be the username or the reverse username.
    • MRS 3.x or later:
      • The password must contain at least eight characters.
      • The password must contain at least four types of the following: uppercase letters, lowercase letters, numbers, spaces, and special characters (~`!?,.;-_'(){}[]/<>@#$%^&*+|\=).
      • The password cannot be the same as the username or the username spelled backwards.
      • The password cannot be a common easily-cracked password.
      • The password cannot be the same as the password used in the last N times. N indicates the value of Repetition Rule in Configuring Password Policies for MRS Cluster Users.