question Can multiple AD domains be configured with ranger? in Archives of Support Questions (Read Only)

Can multiple AD domains be configured with ranger?

Rasiq_Abdul — Thu, 25 May 2017 22:49:40 GMT

considering domain.example1.com & domain.example2.com transitive two way trust exists between these domains.

- hadoop cluster is joined to domain.example2.com.

- users are from domain.example1.com and user groups are in domain.example2.com.

- can usersync and groupsync be done from different domains?

- Is cross domain ranger policy setup achievable?

Re: Can multiple AD domains be configured with ranger?

spolavarapu — Fri, 26 May 2017 01:36:40 GMT

@rasiq abdul,

Currently Ranger doesn't have ability to sync users/groups from multiple domains. Only multiple OUs from same domain are supported in ranger currently. In some customer environments, each domain can be migrated to a common LDAP/AD server under a OU (Organizational Unit) and ranger can be pointed to that common AD/LDAP server.

Thanks,

Sailaja.