Hari Sekhon created RANGER-1606:
-----------------------------------
Summary: Case insensitive user/group ACL matching
Key: RANGER-1606
URL: https://issues.apache.org/jira/browse/RANGER-1606
Project: Ranger
Issue Type: Improvement
Components: admin, Ranger, usersync
Affects Versions: 0.6.0
Environment: HDP 2.5
Reporter: Hari Sekhon
Make ACL matching case insensitive for users/groups.
Ranger imports LDAP users/groups while preserving case by default, but Active
Directory environments with uppercase users/groups often import to lowercase at
the OS level (eg.Centrify), causing unintuitive ACL mismatches as Ranger is
doing case sensitive ACL matching. I've seen this issue at a couple of large
financials now and while it's easily to workaround by configuring lowercasing
on user/group imports it could be handled better automatically similar to the
way Ambari changed to make user/group handling case insensitive (AMBARI-17383),
rather than having to fix it on an environment by environment basis.
This could have a config setting to disable case insensitive ACL matches to
maintain backwards compatibility if needed.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
