Updated on 2024-09-23 GMT+08:00

Changing the Passwords for Manager Users of an MRS Cluster

Passwords of human-machine system users must be regularly changed to ensure MRS cluster security. This section describes how to change passwords on Manager.

If you have the permission to use Manager, you can change the passwords on Manager.

If you do not have the permission to use Manager, you can change the passwords on the cluster client.

Impact on the System

If you have downloaded a user authentication file, download it again and obtain the keytab file after changing the password of the MRS cluster user.

Prerequisites

Changing Passwords on Manager

  1. Log in to Manager as a user who has the user management permission, for example, admin.
  2. Hover over the username in the upper right corner of the page.

    Choose Change Password.

    Figure 1 Choosing Change Password

  3. On the displayed page, set Current Password, New Password, and Confirm Password, and click OK.

    The default password complexity requirements are as follows:

    • For MRS 2.x or earlier:
      • The password must contain at least eight characters.
      • The password must contain at least three types of the following: uppercase letters, lowercase letters, digits, spaces, and special characters ('~!@#$%^&*()-_=+\|[{}];:'",<.>/?).
      • The password cannot be the username or the reverse username.
    • MRS 3.x or later:
      • The password must contain at least eight characters.
      • The password must contain at least four types of the following: uppercase letters, lowercase letters, numbers, spaces, and special characters (~`!?,.;-_'(){}[]/<>@#$%^&*+|\=).
      • The password cannot be the same as the username or the username spelled backwards.
      • The password cannot be a common easily-cracked password.
      • The password cannot be the same as the password used in the last N times. N indicates the value of Repetition Rule in Configuring Password Policies for MRS Cluster Users.

Changing Passwords on the Client

This function is only available in MRS 3.x or later.

  1. Log in to the node where the client is installed as the client installation user.
  2. Run the following command to switch to the client directory, for example, /opt/client:

    cd /opt/client

  3. Run the following command to set environment variables:

    source bigdata_env

  4. Change the user password.

    kpasswd System username

    For example, change the password of the system user test1.

    kpasswd test1

    Enter the old password as prompted and set a new password. The default password complexity requirements are as follows:

    • The password must contain at least eight characters.
    • The password must contain at least four types of the following: uppercase letters, lowercase letters, numbers, spaces, and special characters (~`!?,.;-_'(){}[]/<>@#$%^&*+|\=).
    • The password cannot be the same as the username or the username spelled backwards.
    • The password cannot be a common easily-cracked password.
    • The password cannot be the same as the password used in the last N times. N indicates the value of Repetition Rule in Configuring Password Policies for MRS Cluster Users.

    If an error occurs during the running of the kpasswd command, try the following operations:

    • Close the SSH session and reopen it.
    • Run kdestroy and then kpasswd.