[RANGER-1735] Support representing nested group memberships in Ranger Admin

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.7.1
• Fix Version/s: 1.0.0, 0.7.2
• Component/s: Ranger, usersync
• Assignee: Sailaja Polavarapu
• Reporter: Sailaja Polavarapu
• Created: 15/Aug/17 17:54
• Updated: 22/May/18 21:53
• Resolved: 07/Sep/17 22:08

Description

Several large enterprises have their groups in LDAP/AD nested within other groups. Since Ranger user sync currently only pulls in the immediate group, it is possible that some nested memberships might not be available for policy authoring. Hadoop user-group mapping already supports nested LDAP/AD groups for policy enforcement at the Ranger plugin.