question Ranger usersync with AD fails with https://server1:6182/service/users/default returned a response status of 403 Forbidden in Archives of Support Questions (Read Only)

Ranger usersync with AD fails with https://server1:6182/service/users/default returned a response status of 403 Forbidden

venkata_gangava — Thu, 28 Jan 2016 06:08:38 GMT

Hi,

Ranger usersync process not synching the AD users and throwing below error when a new user is added

27 Jan 2016 15:48:15 ERROR LdapUserGroupBuilder [UnixUserSyncThread] - sink.addOrUpdateUser failed with exception: POST https://server1:6182/service/users/default returned a response status of 403 Forbidden, for user: mthal, groups:

It has picked the newly added user but could not add it to ranger users list.

I have enabled the SSL for Ranger.

Please advice

Thanks,

Venkat

Re: Ranger usersync with AD fails with https://server1:6182/service/users/default returned a response status of 403 Forbidden

amcbarnett — Thu, 28 Jan 2016 06:39:35 GMT

Is mthal user the new User? Did you follow all the steps for Ranger LDAP SSL configuration? See

https://community.hortonworks.com/questions/1018/how-to-configure-ranger-usync-for-ldap-ssl.html

and

https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.2/bk_Ranger_Install_Guide/content/configuring_ranger_for_ldap_ssl.html

Re: Ranger usersync with AD fails with https://server1:6182/service/users/default returned a response status of 403 Forbidden

mr_lee — Fri, 24 May 2019 15:03:24 GMT

Edit ranger config file: Advanced ranger-admin-site ranger.spnego.kerberos.principal:* -> ranger.spnego.kerberos.principal:HTTP/_HOST@DOMAIN