Pushkar Gogte created RANGER-5758:
-------------------------------------
Summary: Support for Openldap service for ranger usersync in
ranger docker
Key: RANGER-5758
URL: https://issues.apache.org/jira/browse/RANGER-5758
Project: Ranger
Issue Type: Improvement
Components: Ranger
Reporter: Pushkar Gogte
Assignee: Pushkar Gogte
The Ranger Docker environment currently lacks out-of-the-box OpenLDAP
integration, making local development and testing of Ranger UserSync and LDAP
authentication difficult.
*Proposed Changes*
* *Infrastructure Layer:* Added {{docker-compose.local-ldap.yml}} defining
{{local-ldap}} ({{{}osixia/openldap:1.5.0{}}}) and {{local-ldap-admin}}
({{{}osixia/phpldapadmin:0.9.0{}}}) services attached to the {{rangernw}}
network.
* *LDAP Data Seeding:* Added {{ldapusergroup.ldif}} to seed
{{{}ou=People,dc=example,dc=com{}}}, user {{john}} ({{{}inetOrgPerson{}}}), and
group {{engineering}} ({{{}groupOfNames{}}}).
* *Ranger Admin Properties:* Configured
{{ranger-admin-install-postgres.properties}} for LDAP auth
({{{}authentication_method = LDAP{}}}, search bases, and DN mapping patterns).
* *Ranger UserSync Properties:* Configured
{{ranger-usersync-install.properties}} with {{{}SYNC_SOURCE = ldap{}}}, target
search filters, base DNs, lowercase case conversion, and large group sync
options.
* *Permissions:* Updated {{docker-compose.ranger.yml}} entrypoint to set
{{user: root}} and execute {{chown -R ranger:ranger}} on {{/opt/ranger/admin/}}
before delegating runtime execution.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
