Uploaded image for project: 'Ranger'
  1. Ranger
  2. RANGER-3203

Add back the support to provide option to retrieve groups from user memberof attribute

Attach filesAttach ScreenshotVotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • 3.0.0, 2.2.0
    • Ranger, usersync
    • None

    Description

      As part of RANGER-2986, group search is made mandatory. This is breaking an usecase to sync users and all the corresponding groups from AD/LDAP.

      Previously, this could be achieved by setting ranger.usersync.group.searchenabled to false and  configure ranger.usersync.ldap.user.groupnameattribute=memberof. That way, usersync used to sync the users based on the user search base and user search filter and use the "memberof" attribute of the user to sync all the groups each user belongs to.

      Now, if you want to achieve the same functionality, group search base and group search filter have to be configured with appropriate filters for sync'ing the groups which might be an extra configuration overhead.

      This is same for both full sync and incremental sync.

      Note:- When incremental sync is enabled, it is highly recommended to enable group search and configure group search base and group search filter accordingly. (Refer to RANGER-1211 for more details)

      Attachments

        Activity

          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            spolavarapu Sailaja Polavarapu
            spolavarapu Sailaja Polavarapu
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Slack

                Issue deployment