[RANGER-4043] [ugsync]Enumerate Groups will give error on executing 'getent group' command

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.0.0, 2.4.0
• Component/s: Ranger
• Assignee: Fateh Singh
• Reporter: Abhishek Pal
• Created: 11/Jan/23 09:53
• Updated: 09/Mar/23 15:47
• Resolved: 03/Mar/23 03:46

Description

Currently in the Ranger usersync code for UnixUserSync the enumerate group option accepts group as comma separated values.
Example:

ranger.usersync.group.enumerate: true
ranger.usersync.group.enumerategroup: test_group1,test_group2

However in the code
ugsync/src/main/java/org/apache/ranger/process
UnixUserGroupBuilder.java -> buildUnixGroupList()

when enumerateGroups is set, the line:

String[] cmd = new String[] {"bash", "-c", command + " '" + group + "'"};

will create the command as:
bash -c getent group <group_name> '<group_name>'

bash -c getent group test_group1 'test_group1'

which is an invalid command as getent takes one argument.
This will return an exit-code 2 with error.