# Change admin password for docker installation

**URL:** <https://forum.opensearch.org/t/change-admin-password-for-docker-installation/17085>\
**Category:** OpenSearch\
**Created:** [December 13, 2023, 10:54pm UTC](https://forum.opensearch.org/t/change-admin-password-for-docker-installation/17085 "2023-12-13T22:54:25Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![astateofmind](https://avatars.discourse-cdn.com/v4/letter/a/58f4c7/32.png) [@astateofmind](https://forum.opensearch.org/u/astateofmind)\
**Post date:** [December 13, 2023, 10:54pm UTC](https://forum.opensearch.org/t/change-admin-password-for-docker-installation/17085/1 "2023-12-13T22:54:25Z")

</div>

**Versions** (relevant - OpenSearch/Dashboard/Server OS/Browser):  
2.11.1

**Describe the issue** :

Cannot change the admin password …

**Configuration** :

**Relevant Logs or Screenshots** :

“{"status":"FORBIDDEN","message":"Resource ‘\*\*\*\*\*\*\*\*’ is reserved."}”

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [December 14, 2023, 10:20am UTC](https://forum.opensearch.org/t/change-admin-password-for-docker-installation/17085/2 "2023-12-14T10:20:27Z")

</div>

@astateofmind The admin password can be changed only with securityadmin.sh script and internal\_users.yml file.

> **[Applying changes to configuration files](https://opensearch.org/docs/latest/security/configuration/security-admin/)**
>
> Applying changes to configuration files

---

<div class="post-metadata">

**Author:** ![astateofmind](https://avatars.discourse-cdn.com/v4/letter/a/58f4c7/32.png) [@astateofmind](https://forum.opensearch.org/u/astateofmind)\
**Post date:** [December 14, 2023, 2:59pm UTC](https://forum.opensearch.org/t/change-admin-password-for-docker-installation/17085/3 "2023-12-14T14:59:02Z")

</div>

I know, that’s NOT the best way to do it for a container …

what happens when I restart the container, update the image, etc?

It is a bad decision, ending up with a lot installations with admin/admin.

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [December 14, 2023, 3:14pm UTC](https://forum.opensearch.org/t/change-admin-password-for-docker-installation/17085/4 "2023-12-14T15:14:08Z")

</div>

@astateofmind How did you deploy your cluster?

---

<div class="post-metadata">

**Author:** ![astateofmind](https://avatars.discourse-cdn.com/v4/letter/a/58f4c7/32.png) [@astateofmind](https://forum.opensearch.org/u/astateofmind)\
**Post date:** [December 14, 2023, 4:39pm UTC](https://forum.opensearch.org/t/change-admin-password-for-docker-installation/17085/5 "2023-12-14T16:39:08Z")

</div>

Looks like it could work with creating an image with admin user not restricted (custom internal-users.ymll file)

Investigating.

Seems to be working …

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [December 14, 2023, 6:30pm UTC](https://forum.opensearch.org/t/change-admin-password-for-docker-installation/17085/6 "2023-12-14T18:30:31Z")

</div>

@astateofmind If you use docker as a container then you can map a data volume for an OpenSearch container. This folder will hold all the indices including the security one.

Whenever you stop or restart the container, the data remains.

---

<div class="post-metadata">

**Author:** ![astateofmind](https://avatars.discourse-cdn.com/v4/letter/a/58f4c7/32.png) [@astateofmind](https://forum.opensearch.org/u/astateofmind)\
**Post date:** [December 14, 2023, 7:58pm UTC](https://forum.opensearch.org/t/change-admin-password-for-docker-installation/17085/7 "2023-12-14T19:58:17Z")

</div>

Yes but still I need to make the admin user not restricted.

Seems to be working after customizing the image.

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [December 14, 2023, 8:48pm UTC](https://forum.opensearch.org/t/change-admin-password-for-docker-installation/17085/8 "2023-12-14T20:48:25Z")

</div>

@astateofmind I got a bit confused here. So you’re looking for a custom password during the docker container deployment.  
If so, you can just mount the internal\_users.yml file with a custom admin user and password as a volume. It will be used for initial configuration during the container deployment.

---

<div class="post-metadata">

**Author:** ![astateofmind](https://avatars.discourse-cdn.com/v4/letter/a/58f4c7/32.png) [@astateofmind](https://forum.opensearch.org/u/astateofmind)\
**Post date:** [December 14, 2023, 9:29pm UTC](https://forum.opensearch.org/t/change-admin-password-for-docker-installation/17085/9 "2023-12-14T21:29:06Z")

</div>

That could work too. Thanks.

I was looking for a solution to change the admin password after the install/deployment. Setting the user as not restricted did the trick.
