[AMBARI-21910] Ranger Usersync config to support nested group evaluation for LDAP Sync source property

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.6.0
• Fix Version/s: trunk, 2.6.0
• Component/s: ambari-server
• Assignee: Mugdha Varadkar
• Reporter: Mugdha Varadkar
• Created: 08/Sep/17 05:24
• Updated: 22/Sep/17 13:58
• Resolved: 22/Sep/17 12:45

Description

As part of RANGER-1735, we are supporting nested groups in ranger usersync. For this, introduced one new property "ranger.usersync.ldap.grouphierarchylevels". The value should be an integer with default value as 0. This property should be under Ranger --> Configs --> Ranger User Info --> Group Configs tab.
This property can be enabled with a flag labelled as "Sync Nested Groups".
1. Default value for this flag is "No"
2. This flag is always shown under Group Configs (even when "Enable group Sync" is set to "No")
3. If this flag is set to "No", then the value for ranger.usersync.ldap.grouphierarchylevels is hidden and is set to "0".
4. If this flag is set to "Yes", then ranger.usersync.ldap.grouphierarchylevels is shown and allowed to set any integer greater than 0.

Issue Links

• links to: Apache Review Link