[RANGER-2021] Ranger "Login Sessions" Audits impossible to browse due to 'rangerusersync'

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.7.0
• Fix Version/s: 1.1.0
• Component/s: usersync
• Assignee: Nikhil Purbhe
• Reporter: Sean Roberts
• Created: 14/Mar/18 09:52
• Updated: 15/Apr/19 15:45
• Resolved: 19/Apr/18 10:31

Description

"Ranger User Sync" logs into Ranger multiple times a second. This is with:

ranger.usersync.source.impl.class=org.apache.ranger.unixusersync.process.UnixUserGroupBuilder
ranger.usersync.unix.backend=nss

The high number and rate of these sessions makes it impossible to use the "Login Sessions" audit page:

Further, it's adding a lot of extra requests and overhead to Ranger, Ranger User Sync, and the backing database (e.g. MySQL).

The service should re-use its session rather than continual logins.

$ rpm -qa *usersync*
ranger_2_6_4_0_91-usersync-0.7.0.2.6.4.0-91.x86_64

Issue Links

• is related to: RANGER-2010 Ranger Tagsync should use cookie based authentication for subsequent requests to Ranger admin
• is related to: RANGER-2064 Ranger Usersync should use cookie based authentication for subsequent requests to Ranger admin