Re: Ranger LDAP Group sync issue

pache.org> Date: Thursday, November 12, 2015 at 9:37 PM To: Ramesh Mani <rm...@hortonworks.com> Cc: "user@ranger.incubator.apache.org" <user@ranger.incubator.apache.org> Subject: Re: Ranger LDAP Group sync issue You are right Ramesh. Is there any setting that can enable log

Re: Ranger LDAP Group sync issue

Bosco > > > From: Kashif Khan <rafz...@gmail.com> > Reply-To: <user@ranger.incubator.apache.org> > Date: Thursday, November 12, 2015 at 9:37 PM > To: Ramesh Mani <rm...@hortonworks.com> > > Cc: "user@ranger.incubator.apache.org" <user@ranger.incubator

Re: Ranger LDAP Group sync issue

Hi Arvind, Deleting all users and groups and pulling them again didn't help. Still same issue. Looks like upgrade is the only option. I have another question, where can I check the logs for all ranger policy changes logs. I know it is written in ranger_audit db but is it possible to log that in

Re: Ranger LDAP Group sync issue

I enabled HDFS audit login. I want when any policy is created, updated or deleted, I want to see that log in a file in addition to db. Is that possible? On Fri, Nov 13, 2015 at 12:28 AM, Arvind S wrote: > you want the same information in the DB table in file format ? or >

Re: Ranger LDAP Group sync issue

ail.com> > Cc: "user@ranger.incubator.apache.org" <user@ranger.incubator.apache.org> > Subject: Re: Ranger LDAP Group sync issue > > you want the same information in the DB table in file format ? or > something more that that ..like debug? > for 1st option .. in ranger 0.5 the

Re: Ranger LDAP Group sync issue

you want the same information in the DB table in file format ? or something more that that ..like debug? for 1st option .. in ranger 0.5 there is an option to enable logging to HDFS also .. not sure if its there in 0.4 .. if you want the 2nd then i don't have an answer right-away .. *Cheers !!*

Re: Ranger LDAP Group sync issue

the only issue i can see is that the member group list has some groups with space in them "ho proxy" .. "nro proxy" .. options > can test by removing user member ship from groups with space in the names ..then check sync > as Ramesh said you can try to move to a newer version .. this is a long

Re: Ranger LDAP Group sync issue

Thanks Arvind, I will try that tomorrow and will see if it get fixed. On Wed, Nov 11, 2015 at 11:10 PM, Arvind S wrote: > the only issue i can see is that the member group list has some groups > with space in them "ho proxy" .. "nro proxy" .. > options > > can test by

Re: Ranger LDAP Group sync issue

Thanks for your response Arvind. Here is the log. The group name I have issue with is "*PRV-BUS-DataScientist-DISABILITY*" that is not showing in Ranger. However, the other group "*prv-bus-datascientist-life*" that was added same day and being pulled in ranger successfully. 10 Nov 2015 12:04:40

Re: Ranger LDAP Group sync issue

Thanks for your response Arvind. Here is the log. 10 Nov 2015 12:04:40 INFO LdapUserGroupBuilder [UnixUserSyncThread] - longGroupName: CN=*PRV-BUS-DataScientist-DISABILITY*,OU=Security-Groups,DC=domain_name,DC=com, groupName: PRV-BUS-DataScientist-DISABILITY 10 Nov 2015 12:04:40 INFO

Fwd: Ranger LDAP Group sync issue

Hi All, I am trying to pull one LDAP group into ranger but it is not being added. Looking at usersync.log, the group is being pulled and users are added to that group, but I am not able to figure out why group is not showing up in either ranger x_group table or ranger UI. Tried to run usersync

Re: Ranger LDAP Group sync issue

can you post the log section where you see the groups and users being pulled .. i have had issues when using AD (internally setting were using LDAP in AD) as user/group source and user/ group names had spaces or dots in them. If possible update to ranger .5 it has some better handling. *Cheers