[
https://issues.apache.org/jira/browse/AMBARI-15153?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15182708#comment-15182708
]
Hudson commented on AMBARI-15153:
---------------------------------
SUCCESS: Integrated in Ambari-trunk-Commit #4455 (See
[https://builds.apache.org/job/Ambari-trunk-Commit/4455/])
AMBARI-15153. Change Ranger's default value for LDAP Group Sync Case (gautam:
[http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=65f0ff68f77fd1d640e705c7b628252c72d15be3])
*
ambari-server/src/main/resources/stacks/HDP/2.3/services/RANGER/configuration/ranger-ugsync-site.xml
*
ambari-server/src/test/python/stacks/2.2/configs/default_custom_path_config.json
* ambari-server/src/test/python/stacks/2.0.6/configs/ranger-namenode-start.json
* ambari-server/src/test/python/stacks/2.2/configs/ranger-admin-secured.json
*
ambari-server/src/main/resources/common-services/RANGER/0.4.0/configuration/usersync-properties.xml
* ambari-web/app/assets/data/stacks/HDP-2.2/configurations.json
* ambari-server/src/test/python/stacks/2.3/configs/spark_default.json
* ambari-server/src/test/python/stacks/2.2/configs/default.json
* ambari-server/src/test/python/stacks/2.2/configs/ranger-admin-default.json
* ambari-server/src/test/python/stacks/2.2/configs/secured.json
> Change Ranger's default value for LDAP Group Sync Case Conversion properties
> to "none"
> --------------------------------------------------------------------------------------
>
> Key: AMBARI-15153
> URL: https://issues.apache.org/jira/browse/AMBARI-15153
> Project: Ambari
> Issue Type: Bug
> Components: ambari-server
> Affects Versions: 2.2.0
> Reporter: Gautam Borad
> Assignee: Gautam Borad
> Fix For: 2.4.0
>
> Attachments: AMBARI-15153.patch
>
>
> *Use Case:*
> If user's LDAP / AD has uppercase usernames and produce uppercase user
> Kerberos principals. When doing the initial user sync into Ranger, the
> default setting of "lower" causes all their user names to be saved in lower
> case, meaning they don't match the Kerberos principals that LDAP / AD is
> handing out.
> It seems to me the more sensible default for both username and group case
> conversion should be "none" and to just use whatever the backend directory
> hands out, as-is, to prevent unexpected confusion such as this.
> *Proposed Solution:*
> Change Ranger's default settings for below given properties :
> ldapGroupSync.username.caseConversion = "none"
> ldapGroupSync.groupname.caseConversion = "none"
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
