Update the Identity Cloud Service Password for Big Data Cloud

Use the following procedure to update the Oracle Identity Cloud Service (IDCS) password for Oracle Big Data Cloud. Failing to do so could result in the IDCS account being locked.

Important:

Changing the IDCS password while running jobs could lock the IDCS account. Big Data applications are executed on multiple mappers/reducers (multiple threads, cores, and nodes) for parallelism. If the IDCS password is changed while these mappers/reducers are running, the IDCS account could be locked.
To update the IDCS password for Big Data Cloud:
  1. Ensure that no jobs are running on the Big Data Cloud cluster and stop any running jobs. To do so:

    1. Log in to the Ambari user interface at https://Ambari_server_IP_address:8080 using the user name and password specified for the cluster when the cluster was created.

      Ambari_server_IP_address is the IP address for the Ambari server host. This address is listed on the Instance Overview page for a cluster in the service console for Oracle Big Data Cloud.

    2. Click Spocs Fabric Service on the left.

    3. From the Service Actions drop-down menu at the top, select Stop.

  2. Change the IDCS password in IDCS.

  3. Update the IDCS password in Big Data Cloud. To do so, SSH to the cluster by using the private key and update the IDCS password:

    ssh -i private_key_file -l opc Ambari_server_IP_address
    sudo -u spoccs-fabric-server -s
    hadoop credential delete fs.swift.service.default.password -provider jceks://hdfs/system/oracle/bdcsce/associations/jceks
    hadoop credential create fs.swift.service.default.password -provider jceks://hdfs/system/oracle/bdcsce/associations/jceks -value new_IDCS_password
    
    hadoop credential delete fs.swift2d.service.default.password -provider jceks://hdfs/system/oracle/bdcsce/associations/jceks
    hadoop credential create fs.swift2d.service.default.password -provider jceks://hdfs/system/oracle/bdcsce/associations/jceks -value new_IDCS_password

    where:

    • private_key_file is the path to the SSH private key file that matches the public key associated with the cluster.

    • Ambari_server_IP_address is the IP address for the Ambari server host.

    • new_IDCS_password is the new IDCS password.

  4. Log in to the Ambari user interface as described in step 1, only this time select Start from the Service Actions drop-down menu.

  5. Resubmit any stopped jobs.