[RANGER-1211] Improve Ranger Usersync to sync AD/LDAP users and/or groups incrementally.

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.6.1, 0.6.2
• Fix Version/s: 0.7.0
• Component/s: usersync
• Labels: ranger
• Assignee: Sailaja Polavarapu
• Reporter: Sailaja Polavarapu
• Created: 07/Nov/16 23:24
• Updated: 27/Jan/17 18:24
• Resolved: 25/Jan/17 06:38

Description

During every sync cycle, Ranger Usersync performs full LDAP/AD sync and computes the delta in-memory and updates ranger admin. Since usersync computes the delta (including group memberships) of all the users that are sync’d in memory for every sync cycle, UserSync can take a lot of resources on the server it is running on.

Enhance usersync to perform full sync only during startup and incremental or delta sync for the subsequent sync cycles. This way the delta computation of group memberships can be highly reduced and can increase usersync performance.

Issue Links

• is depended upon by: RANGER-1333 Enable Incremental Sync by default when sync source is ldap for fresh install of ranger usersync