Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

Ranger cannot sync Freeipa's users with groups

avatar
Explorer

Hi everyone,

We installed ranger user-sync and able to sync all external users from FreeIpa.But this user-sync can only sync users with groups thoses dont exist in ranger.If a user exists in ranger, this user-sync cannot sync its groups.

We tried to call Ranger Api 

/service/xusers/secure/users/%s

to add user's group.But  when we restart user-sync manually, the user's group added before is gone.

How can we solve this problem ?

 

10 REPLIES 10

avatar
Explorer

steps to reproduce this issue:

1.ranger usersync service syncs users

2.change some user's group with API :

/service/xusers/secure/users/%s

3.restart usersync service

4.when usersync service finished, the user's group is gone

@vamsi_redd