Details
Critical Description
When installing Ranger through Ambari, you have the option to specify DB user names. If you leave the Ranger DB root user configuration db_root_user as the default (which is 'root'), Ambari will erroneously attempt to create a local user named root, and assign it to the group 'hadoop'. This results in local root users being reassigned to the group 'hadoop'. In addition, both the db_user param and audit_db_name param are erroneously being used to create local users (granted, with less severe consequences).
