@Samet Karadag,
Ranger doesn't support syncing from two different sources simultaneously. But there is a workaround to have users from two different sources in Ranger.
Since Ranger doesn't automatically delete the users that are sync'd, first sync users from Unix as usual. Once that is done, change the ranger config to sync from LDAP and restart Ranger. Then the users from AD are sync'd to Ranger. At this point you can see users in Ranger from both Unix and LDAP.
Few things to note down here:
1. Ranger gets updates only from the latest sync source that is configure. In the above workaround scenario, ranger gets updates only from LDAP. Any new users added in Unix afterwards will not be sync'd until the sync source configuration is set back to Unix and restart ranger.
2. If same user/group exists in two different sources, then the latest sync source user/group is taken into effect. One of the example can be:
Say user "bob" exists in Unix and is part of unix groups like "grp1" and "grp2"
User "bob" also exists in AD/LDAP and is member of groups "ad_grp1".
In this scenario, if ranger is configured to sync from Unix first and then LDAP/AD, then the effective user "bob" will only have "ad_grp1" as the groups.
In this case "grp1" and "grp2" will still be shown under "Groups" tab in Ranger.
Hope this helps!
