@Dinesh Das The HDP Sandbox 2.5 comes with Knox that includes a demo LDAP server which should be sufficient for testing purposes. You can start and stop this from Ambari under Knox > Service Actions.
In the Knox configuration is a section called 'Advanced users-ldif' which contains the LDIF data loaded by the demo LDAP server. You can add users and groups to this LDIF, save the configuration and then restart the demo LDAP server. If you're not familiar with LDIF then the template to add a user is something like:
dn: uid=<username>,ou=people,dc=hadoop,dc=apache,dc=org objectclass: top objectclass: person objectclass: organizationalPerson objectclass: inetOrgPerson cn: <common name, e.g. Joe Bloggs> sn: <surname, e.g. Bloggs> uid: <username> userPassword: <password>
Replace <username> with the username you want to add, <common name, e.g. Joe Bloggs> with the full name of the user, <surname, e.g. Bloggs> with the surname of the user, and <password> with the password you want.
Similarly for groups, use the template
dn: cn=<groupname>,ou=groups,dc=hadoop,dc=apache,dc=org objectclass:top objectclass: groupofnames cn: <groupname> member: uid=<username>,ou=people,dc=hadoop,dc=apache,dc=org
Replace <groupname> with the group name you want and add and as many of the member: lines as you want to add users to the group, e.g.
member: uid=user_a,ou=people,dc=hadoop,dc=apache,dc=org member: uid=user_b,ou=people,dc=hadoop,dc=apache,dc=org member: uid=user_c,ou=people,dc=hadoop,dc=apache,dc=org
Configuring your OS to read these users and groups from the demo LDAP server is quite complex - you'll need a lot more information in the LDIF file to support this and to configure PAM/NSS to talk to the LDAP server so for your purposes I'd stick to using 'adduser' and 'addgroup' to add all the users and groups you want to the OS manually.
Once you've added the users and groups you want and started the demo LDAP you can use the instructions here to connect Ambari up with the demo LDAP server: https://community.hortonworks.com/questions/2838/has-anyone-integrated-for-demo-purposes-only-the-k....
For Ranger, you should also leave it syncing users from the OS (the default configuration) as you will have used 'adduser' and 'addgroup' to add all the users to the OS so Ranger will automatically sync these for you. If you really want to sync the users from the demo LDAP server then you'll need the set the following properties for Ranger Admin and Ranger Usersync. Note that I haven't tried this so it may not work and you may need to experiment with some of the settings.
Ranger:
ranger.ldap.base.dn=dc=hadoop,dc=apache,dc=org
ranger.ldap.bind.dn=uid=admin,ou=people,dc=hadoop,dc=apache,dc=org
ranger.ldap.bind.password=admin-password
ranger.ldap.group.roleattribute=cn
ranger.ldap.group.searchbase=ou=groups,dc=hadoop,dc=apache,dc=org
ranger.ldap.group.searchfilter=(member=uid={0},ou=people,dc=hadoop,dc=apache,dc=org)
ranger.ldap.referral=follow
ranger.ldap.url=ldap://localhost:33389
ranger.ldap.user.dnpattern=uid={0},ou=people,dc=hadoop,dc=apache,dc=orgranger.ldap.user.searchfilter=(uid={0})
UserSync:
ranger.usersync.group.memberattributename=member ranger.usersync.group.nameattribute=cn ranger.usersync.group.objectclass=groupofnames ranger.usersync.group.search.first.enabled=false ranger.usersync.group.searchbase=ou=groups,dc=hadoop,dc=apache,dc=org ranger.usersync.group.searchenabled=true ranger.usersync.group.searchfilter= ranger.usersync.group.searchscope=sub ranger.usersync.group.usermapsyncenabled=true ranger.usersync.ldap.binddn=uid=admin,ou=people,dc=hadoop,dc=apache,dc=org ranger.usersync.ldap.groupname.caseconversion=none ranger.usersync.ldap.ldapbindpassword=admin-password ranger.usersync.ldap.referral=follow ranger.usersync.ldap.searchBase=dc=hadoop,dc=apache,dc=org ranger.usersync.ldap.url=ldap://localhost:33389 ranger.usersync.ldap.user.groupnameattribute=memberof,ismemberof ranger.usersync.ldap.user.nameattribute=uid ranger.usersync.ldap.user.objectclass=person ranger.usersync.ldap.user.searchbase=ou=people,dc=hadoop,dc=apache,dc=org ranger.usersync.ldap.user.searchfilter= ranger.usersync.ldap.user.searchscope=sub ranger.usersync.ldap.username.caseconversion=none
