Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

Ranger usersync successful but user count returned is 0 in HDP 2.4

Ranger usersync successful but user count returned is 0 in HDP 2.4

New Contributor

14 Sep 2016 20:35:47 INFO LdapUserGroupBuilder [UnixUserSyncThread] - LdapUserGroupBuilder created

14 Sep 2016 20:35:47 INFO AbstractMapper [UnixUserSyncThread] - Initializing for ranger.usersync.mapping.username.regex

14 Sep 2016 20:35:47 INFO AbstractMapper [UnixUserSyncThread] - Initializing for ranger.usersync.mapping.groupname.regex

14 Sep 2016 20:35:47 INFO UserGroupSync [UnixUserSyncThread] - initializing source: org.apache.ranger.ldapusersync.process.LdapUserGroupBuilder

14 Sep 2016 20:35:47 INFO UserGroupSync [UnixUserSyncThread] - Begin: initial load of user/group from source==>sink

14 Sep 2016 20:35:47 INFO LdapUserGroupBuilder [UnixUserSyncThread] - LDAPUserGroupBuilder updateSink started

14 Sep 2016 20:35:47 INFO LdapUserGroupBuilder [UnixUserSyncThread] - LdapUserGroupBuilder initialization started

14 Sep 2016 20:35:47 INFO LdapUserGroupBuilder [UnixUserSyncThread] - LdapUserGroupBuilder initialization completed with -- ldapUrl: ldap://172.16.36.131:389, ldapBindDn: ambari@AD.COM, ldapBindPassword: ***** , ldapAuthenticationMechanism: simple, searchBase: dc=AD,dc=COM, userSearchBase: ou=RANGERXMINE,dc=AD,dc=COM, userSearchScope: 2, userObjectClass: person, userSearchFilter: , extendedUserSearchFilter: (objectclass=person), userNameAttribute: cn, userSearchAttributes: [cn, ismemberof, memberof], userGroupNameAttributeSet: [ismemberof, memberof], pagedResultsEnabled: true, pagedResultsSize: 500, groupSearchEnabled: false, groupSearchBase: dc=AD,dc=COM, groupSearchScope: 2, groupObjectClass: groupofnames, groupSearchFilter: , extendedGroupSearchFilter: (&(objectclass=groupofnames)(member={0})), extendedAllGroupsSearchFilter: (&(objectclass=groupofnames)), groupMemberAttributeName: member, groupNameAttribute: cn, groupUserMapSyncEnabled: false, ldapReferral: ignore

14 Sep 2016 20:35:47 INFO LdapUserGroupBuilder [UnixUserSyncThread] - LDAPUserGroupBuilder.updateSink() completed with user count: 0

14 Sep 2016 20:35:47 INFO UserGroupSync [UnixUserSyncThread] - End: initial load of user/group from source==>sink

14 Sep 2016 20:35:47 INFO UserGroupSync [UnixUserSyncThread] - Done initializing user/group source and sink

1 REPLY 1
Highlighted

Re: Ranger usersync successful but user count returned is 0 in HDP 2.4

Expert Contributor

@Rahul Sarda, Have you checked whether your search filter is correct?

Verify if your entries have for example the objectclass person as to your search filter: extendedUserSearchFilter: (objectclass=person)

Other than that is Ranger just putting out your searchBase in the wrong order? "ou=RANGERXMINE,dc=AD,dc=COM" should actually be "dc=COM,dc=AD,ou=RANGERXMINE" or?