[AMBARI-19086] LDAP sync creates groups with "Local" type

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.5.0
• Fix Version/s: 2.5.0
• Component/s: ambari-server
• Assignee: Attila Doroszlai
• Reporter: Dhanya Balasundaran
• Created: 05/Dec/16 15:13
• Updated: 20/Mar/17 21:56
• Resolved: 05/Dec/16 21:46

Description

STR:

ambari-server setup-ldap
ambari-server restart
ambari-server sync-ldap --all

Result: users synced from LDAP are created with type LDAP, but groups are created with type LOCAL:

ambari=> select group_id, group_name, group_type, ldap_group from groups order by group_name;
 group_id |    group_name     | group_type | ldap_group
----------+-------------------+------------+------------
       59 | accumulo          | LOCAL      |          1
        2 | ambari            | LOCAL      |          0
       72 | ambari-server     | LOCAL      |          1
       81 | ams               | LOCAL      |          1
       60 | atlas             | LOCAL      |          1
...

Issue Links

• is broken by: AMBARI-12263 Support PAM as authentication mechanism for accessing Ambari UI/REST
• relates to: AMBARI-18533 Removal of users.ldap_user & groups.ldap_group columns
• links to: Review request