Ranger usersync with AD fails with https://server1:6182/service/users/default returned a response status of 403 Forbidden

[#1]

Hi,

Ranger usersync process not synching the AD users and throwing below error when a new user is added

27 Jan 2016 15:48:15 ERROR LdapUserGroupBuilder [UnixUserSyncThread] - sink.addOrUpdateUser failed with exception: POST https://server1:6182/service/users/default returned a response status of 403 Forbidden, for user: mthal, groups:

It has picked the newly added user but could not add it to ranger users list.

I have enabled the SSL for Ranger.

Please advice

Thanks,

Venkat

[#2 · Accepted solution]

Is mthal user the new User? Did you follow all the steps for Ranger LDAP SSL configuration? See

https://community.hortonworks.com/questions/1018/how-to-configure-ranger-usync-for-ldap-ssl.html

and

https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.2/bk_Ranger_Install_Guide/content/configuring...

[#3]

Edit ranger config file: Advanced ranger-admin-site ranger.spnego.kerberos.principal:* -> ranger.spnego.kerberos.principal:HTTP/_HOST@DOMAIN