Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

Can't see a few ldap users in Ranger Admin UI

Solved Go to solution
Highlighted

Can't see a few ldap users in Ranger Admin UI

Contributor

Hi,

I got a problem when Ranger sync user from AD. My Ranger is V0.6.0.2.0 in HDF-2.0.2.0

Most of users are sync from AD, and I can see them on Ranger Admin UI Users/Groups. Only two users in the group nifi-admins are missed.

But I can see they are fetched in usersync.log

27 Dec 2016 22:45:50  INFO UserGroupSync [UnixUserSyncThread] - Begin: initial load of user/group from source==>sink
27 Dec 2016 22:45:50  INFO LdapUserGroupBuilder [UnixUserSyncThread] - LDAPUserGroupBuilder updateSink started
27 Dec 2016 22:45:50  INFO LdapUserGroupBuilder [UnixUserSyncThread] - Performing Group search first
27 Dec 2016 22:45:50  INFO LdapUserGroupBuilder [UnixUserSyncThread] - Adding nifi-admins to user CN=NiFi Admin1,OU=CorpUsers,DC=field,DC=hortonworks,DC=com
27 Dec 2016 22:45:50  INFO LdapUserGroupBuilder [UnixUserSyncThread] - Adding nifi-admins to user CN=NiFi Admin,OU=CorpUsers,DC=field,DC=hortonworks,DC=com
27 Dec 2016 22:45:50  INFO LdapUserGroupBuilder [UnixUserSyncThread] - No. of members in the group nifi-admins = 2

And I can verify them in the Ranger Usersync node with sssd

$ id nifiadmin
uid=1960401378(nifiadmin) gid=1960400513(domain_users) groups=1960400513(domain_users),1960401370(nifi-admins)
$ id nifiadmin1
uid=1960402757(nifiadmin1) gid=1960400513(domain_users) groups=1960400513(domain_users),1960401370(nifi-admins)

Not sure how to solve it.

Regards,

Wendell

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted

Re: Can't see a few ldap users in Ranger Admin UI

Contributor

Find the problem.

change

ranger.usersync.ldap.user.searchfilter=(sAMAccountName={0})

to

ranger.usersync.ldap.user.searchfilter=(sAMAccountName=*)

The problem solved.

View solution in original post

2 REPLIES 2

Re: Can't see a few ldap users in Ranger Admin UI

Cloudera Employee
Highlighted

Re: Can't see a few ldap users in Ranger Admin UI

Contributor

Find the problem.

change

ranger.usersync.ldap.user.searchfilter=(sAMAccountName={0})

to

ranger.usersync.ldap.user.searchfilter=(sAMAccountName=*)

The problem solved.

View solution in original post

Don't have an account?
Coming from Hortonworks? Activate your account here