[RANGER-3102] Provide option in usersync to sync all the sub groups by providing only the parent group in the group search filter

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: Ranger, usersync
• Assignee: Unassigned
• Reporter: Sailaja Polavarapu
• Created: 02/Dec/20 19:16
• Updated: 02/Dec/20 19:16

Description

• The groups regardless of if they are a patent or sub group to be imported as a group.
• Specify the parent group only (no sub-groups) in the ranger usersync's groupsSearchFilter;
• All users of every group, parent or subgroup to be imported as users.
• To set the hierarchy in Ranger config to the appropriate number to capture all subgroups and users.

Use Case: Usersync should import all the sub-groups and its associated posixAccount from a parent group, while filtering out all other groups except the parent group it self:

Eg: GroupsSearchFilter = (&(objectclass=groupOfUniqueNames)(cn=parentgrp1))