[RANGER-1102] Conflict between internal and external users with same username

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 0.5.2, 0.6.0
• Component/s: usersync
• Assignee: Unassigned
• Reporter: Yujie Li
• Created: 14/Jul/16 20:46
• Updated: 28/Aug/16 18:49

Description

When Ranger syncs user data from external source, if external users share the same username with existing internal users, those internal users will be updated with external users' group information.

For example, we have an internal user "admin" in "admin" group. If we sync from UNIX and there is also a user named "admin" in group "test", eventually the internal "admin" will still be internal but its group will be updated to "test". There won't be another external "admin" user.

This should not be allowed as they should be separated as two different users.

But on the other hand, if we create an internal user from the web UI while we already have an external user with that username, there will be an warning saying "user already exists" and the action will abort. This will not cause any issues.

Issue Links

• relates to: RANGER-980 User sync does not delete users if they do not exist anymore