question Re: Does Ambari server need ldap-sync to be executed after adding an user to groups in AD in Archives of Support Questions (Read Only)

Does Ambari server need ldap-sync to be executed after adding an user to groups in AD

nyakkanti — Tue, 12 Apr 2016 17:08:36 GMT

We have Ambari 2.1.1 with Ambari views and AD integration. Do we need to run ldap-sync after an user is added to the group in AD. We have an issue where user is not authorized until we ran ldap-sync even though the user was part of the group having access to Views.

Re: Does Ambari server need ldap-sync to be executed after adding an user to groups in AD

drussell — Tue, 12 Apr 2016 17:39:21 GMT

Hi there @nyakkanti you do indeed need to re-run ldap-sync so that Ambari will be able to know about that new user.

This is covered in more detail at the link below:

https://docs.hortonworks.com/HDPDocuments/Ambari-2.2.1.0/bk_Ambari_Security_Guide/content/_specific_set_of_users_and_groups.html

Re: Does Ambari server need ldap-sync to be executed after adding an user to groups in AD

pminovic — Tue, 12 Apr 2016 18:16:27 GMT

Hi @nyakkanti, see this for Ambari REST API calls to automate ldap-sync and run it using cron.