Support Questions

Find answers, ask questions, and share your expertise

Ranger cannot sync Freeipa's users with groups

avatar
Explorer

Hi everyone,

We installed ranger user-sync and able to sync all external users from FreeIpa.But this user-sync can only sync users with groups thoses dont exist in ranger.If a user exists in ranger, this user-sync cannot sync its groups.

We tried to call Ranger Api 

/service/xusers/secure/users/%s

to add user's group.But  when we restart user-sync manually, the user's group added before is gone.

How can we solve this problem ?

 

10 REPLIES 10

avatar
Explorer

steps to reproduce this issue:

1.ranger usersync service syncs users

2.change some user's group with API :

/service/xusers/secure/users/%s

3.restart usersync service

4.when usersync service finished, the user's group is gone

@vamsi_redd