Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

ranger empty groups sync

ranger empty groups sync

Expert Contributor

Hello,

i have a problem when try to sync AD groups with Ranger, empty groups not appear in list of groups.

My "Group Search Filter" (|(cn=RBAC-DataLake-DevOps-Test)(cn=RBAC-DataLake-Jupyter User-Test)(cn=RBAC-DataLake-Add Cards Info-Prod)) in config

In log-file all three groups sync fine:

22 Aug 2018 13:52:41  INFO LdapDeltaUserGroupBuilder [UnixUserSyncThread] - No members available for RBAC-DataLake-Add Cards Info-Prod                                                                                                      │
22 Aug 2018 13:52:41  INFO LdapDeltaUserGroupBuilder [UnixUserSyncThread] - LdapDeltaUserGroupBuilder.getGroups() completed with group count: 3     

But appear only those which contain users.

86640-capture.png

Platform: HDP 2.6.4.0 on RHEL 7 with Ambari 2.6.1.0

1 REPLY 1

Re: ranger empty groups sync

Expert Contributor

I have workaround with adding users to group before sync it

Don't have an account?
Coming from Hortonworks? Activate your account here