Our Community is getting an upgrade! To get everything ready for the relaunch, we’ll be placing the site in read-only mode starting September 21st. We really appreciate your understanding while we get things set up behind the scenes. Catch up on all the exciting details about the move here. Need help or have questions? Drop us a line at [email protected]
When setting Bind Anonymous in Ambari's Ranger usersync tab it complains that ranger.usersync.ldap.binddn can not be empty in ambari usersync service logs, with the below stack trace :
File "/var/lib/ambari-agent/cache/common-services/RANGER/0.4.0/package/scripts/setup_ranger_xml.py", line 44, in ranger
setup_usersync(upgrade_type=upgrade_type)
File "/var/lib/ambari-agent/cache/common-services/RANGER/0.4.0/package/scripts/setup_ranger_xml.py", line 319, in setup_usersync
password_validation(params.ranger_usersync_ldap_ldapbindpassword)
File "/var/lib/ambari-agent/cache/common-services/RANGER/0.4.0/package/scripts/setup_ranger_xml.py", line 249, in password_validation
raise Fail("Blank password is not allowed for Bind user. Please enter valid password.")
resource_management.core.exceptions.Fail: Blank password is not allowed for Bind user. Please enter valid password.
ROOT CAUSE :
Currently 'Bind Anonymous' option is not supported in Ranger.
Hortonworks Internal BUG-68578 has been filed to disable this option in Ambari.
RESOLUTION
Use a binddn and the bind password for Ranger Usersync.