question Re: after deleting user and group from openLDAP server its shows in ambari and ranger in Archives of Support Questions (Read Only)

after deleting user and group from openLDAP server its shows in ambari and ranger

heta_desai — Mon, 28 May 2018 18:51:23 GMT

HI,

I have configured openLDAP Server. I have synced LDAP users and groups with ranger as well as ambari.

After deleting the users and groups from openLDAP server, it do not deletes from Ambari and ranger databases.

It do not allow to login using deleted user but it shows in UI.

How to automatically delete users and groups from Ambari and ranger database when users and groups are deleted from openLDAP Server ?

Thank You.

Re: after deleting user and group from openLDAP server its shows in ambari and ranger

umair_khan — Mon, 28 May 2018 23:02:02 GMT

If users and groups are deleted in openLDAP server you should use 'existing' mode with ambari ldap sync:

ambari-server sync-ldap --existing

https://docs.hortonworks.com/HDPDocuments/Ambari-2.6.0.0/bk_ambari-security/content/existing_users_and_groups.html

Re: after deleting user and group from openLDAP server its shows in ambari and ranger

heta_desai — Tue, 29 May 2018 14:20:39 GMT

@Umair Khan

The below command you gave worked for me.

ambari-server sync-ldap --existing

you can use this option to synchronize only those entities that are in Ambari with LDAP. Users and groups will be removed from Ambari if they no longer exist in LDAP.

But,we can use 'all' mode with sync-ldap, that will synchronize those entities that are in Ambari with LDAP, means syncs new entries to the ambari as well as removes entries from Ambari if they no longer exist in LDAP.

 ambari-server sync-ldap --all

so, we can add and remove entries to the Ambari at the same time using single command.

Thanks.