question Re: [Ranger] How to connect ldap server with HDP 2.3.4 and ambari 2.1.1. in Archives of Support Questions (Read Only)

[Ranger] How to connect ldap server with HDP 2.3.4 and ambari 2.1.1.

archerhuang — Mon, 19 Aug 2019 10:20:37 GMT

HDP version: 2.3.4

Ambari: 2.1.1

I set several sections of ranger on ambari.

Such as "Ranger Setting"

"LDAP Settings"

"Advanced ranger-ugsync-site".

Unfortunately, when I login the ranger UI(http://RANGER_IP:6080), I could not see any user or group from my ldap server.

In addition, if I set those configurations successfully, how can I verify it ?

I Only verify in user/group page on Ranger UI. It is true?

If the Hue service connect to ldap server, we only login from our accounts of ldap server.

Does the ranger UI offers this method of verification ?

nsabharwal — Wed, 03 Feb 2016 18:43:47 GMT

You should see usersync process installed. Login to that node and look for logs under /var/log/ranger/usersync

There is a file called usersync.log and it will have all the entries coming in from AD.

Ranger UI will have all the sync users once its synced.

Now, You need to check the setting in Ambari to make sure that OU and other paramaeters are correct.

Ranger logs will you the information on why sync is not happening.

archerhuang — Fri, 05 Feb 2016 11:41:04 GMT

I already resolved this problem by your suggestion.

The points of key are the following columns in Advanced ranger-ugsync-site.

ranger.usersync.source.impl.class	org.apache.ranger.ldapusersync.process.LdapUserGroupBuilder
ranger.usersync.sink.impl.class	org.apache.ranger.ldapusersync.process.PolicyMgrUserGroupBuilder

There are no hints on the HDP 2.3.2 document.

After these configuration, I could see the users of ldap server on my reanger UI.

Thanks.