[ 
https://issues.apache.org/jira/browse/RANGER-1345?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15870216#comment-15870216
 ] 

Chethana commented on RANGER-1345:
----------------------------------

[~spolavarapu] 
i still notice error and see that the group and user mapping information is not 
synced as expected

{code}
15 Feb 2017 05:46:25  WARN LdapPolicyMgrUserGroupBuilder [UnixUserSyncThread] - 
ERROR: Unable to get group user mappings for: rangerdeltaGrpqos3
java.lang.NullPointerException
        at 
org.apache.ranger.ldapusersync.process.LdapPolicyMgrUserGroupBuilder.getGroupUserInfo(LdapPolicyMgrUserGroupBuilder.java:661)
        at 
org.apache.ranger.ldapusersync.process.LdapPolicyMgrUserGroupBuilder$3.run(LdapPolicyMgrUserGroupBuilder.java:402)
        at 
org.apache.ranger.ldapusersync.process.LdapPolicyMgrUserGroupBuilder$3.run(LdapPolicyMgrUserGroupBuilder.java:398)
        at java.security.AccessController.doPrivileged(Native Method)
        at javax.security.auth.Subject.doAs(Subject.java:360)
        at 
org.apache.ranger.ldapusersync.process.LdapPolicyMgrUserGroupBuilder.addOrUpdateGroup(LdapPolicyMgrUserGroupBuilder.java:398)
        at 
org.apache.ranger.ldapusersync.process.LdapDeltaUserGroupBuilder.updateSink(LdapDeltaUserGroupBuilder.java:333)
        at 
org.apache.ranger.usergroupsync.UserGroupSync.syncUserGroup(UserGroupSync.java:114)
        at 
org.apache.ranger.usergroupsync.UserGroupSync.run(UserGroupSync.java:87)
        at java.lang.Thread.run(Thread.java:745)
{code}

> User group memberships are not updated properly in Ranger with Incremental 
> LDAP/AD sync
> ---------------------------------------------------------------------------------------
>
>                 Key: RANGER-1345
>                 URL: https://issues.apache.org/jira/browse/RANGER-1345
>             Project: Ranger
>          Issue Type: Bug
>          Components: Ranger
>    Affects Versions: 0.7.0
>            Reporter: Sailaja Polavarapu
>            Assignee: Sailaja Polavarapu
>             Fix For: 0.7.0
>
>         Attachments: 
> 0001-RANGER-1345-User-group-memberships-are-not-updated-p.patch
>
>
> When a user is deleted from a group in AD, it is not reflected in ranger when 
> incremental AD/LDAP sync is configured on Ranger Usersync.
> Where as if a user is added to a group, the updates are reflected in ranger 
> without an issue.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Reply via email to