- Subscribe to RSS Feed
- Mark Question as New
- Mark Question as Read
- Float this Question for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Can multiple LDAP servers be configured on apache knox/ranger
- Labels:
-
Apache Ranger
Created ‎05-20-2016 01:04 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
We use multiple LDAP servers separated based on geographic location. Is it possible to configure multiple LDAP servers in apache knox/Ranger.
Created ‎05-21-2016 01:04 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
In Knox, you can create two or more topology files, and specify different LDAP seraver in each of them. End users can select which LDAP server to use by specifying one of those file names in the Knox URL. Specifiying two or more LDAP or any other authentication providers in the same topology file is not supported, for more details see here. Ranger also supports only one LDAP provider. For initial user-sync you can sync with one LDAP server, and then change settings and sync with the other. However, for subsequent user-syncs Ranger will use only the single LDAP server currently set.
Created ‎05-20-2016 01:08 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Created ‎05-20-2016 01:35 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Not sure if you are looking for something like referral -
+ <property> + <name>ranger.ldap.referral</name> + <value>ignore</value> + <description>Set to follow if multiple LDAP servers are configured to return continuation references for results. Set to ignore (default) if no referrals should be followed</description> + </property>
Created ‎05-21-2016 01:04 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
In Knox, you can create two or more topology files, and specify different LDAP seraver in each of them. End users can select which LDAP server to use by specifying one of those file names in the Knox URL. Specifiying two or more LDAP or any other authentication providers in the same topology file is not supported, for more details see here. Ranger also supports only one LDAP provider. For initial user-sync you can sync with one LDAP server, and then change settings and sync with the other. However, for subsequent user-syncs Ranger will use only the single LDAP server currently set.
