Created on
11-04-2019
02:12 PM
- last edited on
11-04-2019
05:15 PM
by
ask_bill_brooks
Trying to set up LDAP/AD integration for Ranger on Ambari, but after switching Sync Source to LDAP/AD, when looking at the Configs > Advanced > LDAP Settings tab in the Ambari UI, seeing template values and am not sure if they are actually correct or not. Eg. if the LADP url is correct or needs to be changed.
Is there any where to see what these templated values actually are?
Created on 11-05-2019 08:26 AM - edited 11-05-2019 08:27 AM
Those values are defined in previous tab: Common Configs. You need to make sure to follow documentation steps completely when configuring LDAP/AD integration for ranger.
Created 11-05-2019 09:01 AM
Config variables used are set in params.py script for the service in Ambari stack definition. And these values can be referred to config from another service config or can be hardcoded to a value in params.py.
For example, for Ranger all the references can be seen from the script on any ambari agent host.
#grep -i configuration /var/lib/ambari-agent/cache/common-services/RANGER/0.4.0/package/scripts/params.py | grep usersync | grep ldap
ranger_usersync_ldap_ldapbindpassword = unicode(config["configurations"]["ranger-ugsync-site"]["ranger.usersync.ldap.ldapbindpassword"])
ranger_ug_ldap_url = config["configurations"]["ranger-ugsync-site"]["ranger.usersync.ldap.url"]
ranger_ug_ldap_bind_dn = config["configurations"]["ranger-ugsync-site"]["ranger.usersync.ldap.binddn"]
ranger_ug_ldap_user_searchfilter = config["configurations"]["ranger-ugsync-site"]["ranger.usersync.ldap.user.searchfilter"]
ranger_ug_ldap_group_searchbase = config["configurations"]["ranger-ugsync-site"]["ranger.usersync.group.searchbase"]
ranger_ug_ldap_group_searchfilter = config["configurations"]["ranger-ugsync-site"]["ranger.usersync.group.searchfilter"]
[root@c316-node2 ambari-agent]#
Or refer the source code for this script from github/org/apache/ambari