-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/45771/
-----------------------------------------------------------
Review request for ranger, Alok Lal, Don Bosco Durai, Abhay Kulkarni, Madhan
Neethiraj, Ramesh Mani, and Velmurugan Periasamy.
Bugs: RANGER-893
https://issues.apache.org/jira/browse/RANGER-893
Repository: ranger
Description
-------
Added support to ranger usersync to compute group membership using user's short
name for user based search. Similar support is added to fetch users using
user's short name for Group based search as well.
Rearranged the username case conversion and username transformation logic code
so that these rules are applied just before posting the userinfo to ranger
admin.
Diffs
-----
ugsync/src/main/java/org/apache/ranger/ldapusersync/process/LdapUserGroupBuilder.java
e68a52f
ugsync/src/main/java/org/apache/ranger/unixusersync/config/UserGroupSyncConfig.java
2297b65
ugsync/src/test/java/org/apache/ranger/usergroupsync/LdapUserGroupTest.java
df8adf3
ugsync/src/test/resources/ADSchema.ldif 59402f1
ugsync/src/test/resources/ranger-ugsync-site.xml 1bd07d1
Diff: https://reviews.apache.org/r/45771/diff/
Testing
-------
1. Added unit test cases to cover the user based search as well as group based
search using user's short name.
2. Configured OpenLdap Server (test instance) to use user's short name as the
member attribute (memberuid) for some of the groups (posixGroups). Performed
functional tests against the test instance OpenLdap Server for both Group based
search and User based search test cases.
3. Also performed some regression test with OpenLdap and AD servers.
Thanks,
Sailaja Polavarapu
