Ranger doesn't sync all users from Active Directory

[#1]

Configured new test instance of Ranger

Settings

Binded user has domain admin rights.

Now synced only 999 users of 1650 existed in AD

What problem can be?

[#2]

Hi @bananaman , Can you please refer the below docs and enable the user search first and see if it helps. 

https://docs.cloudera.com/cdp-private-cloud-base/7.1.3/security-ranger-authentication-unix-ldap-ad/t...

Also please try to run ldapsearch to see if it is able to list all the users. 

[#3]

Hi!

As you can see, user search is already enabled, ldapsearch returns 999 results of 1650 in Active Directory....

[#4]

@bananaman  This happens when the search filter is not correct. In your case its. Try to change search filter. 

sAMAccountName=*

If this does not help try to add the usersync logs to check further.

[#5 · Accepted solution]

I solved problem, reason was not in filter