I'm having issue with authentication for ranger user sync
I've changed the password via updatepolicymgrpassword.py, if I log in manually
via the UI with the rangerusersync user and use the same API the record is
accepted but the rangerusersync process does not seem to be picking this up
properly and I get 401 rejects in the log.
Furthermore rangeruser sync seems to be flagging these as successes
02 Jan 2025 18:31:15 DEBUG o.a.r.u.p.PolicyMgrUserGroupBuilder
[UnixUserSyncThread] - User Group Mapping:
{"userName":null,"noOfNewUsers":0,"noOfNewGroups":0,"noOfModifiedUsers":0,"noOfModifiedGroups":0,"syncSource":"LDAP/AD","sessionId":null,"ldapSyncSourceInfo":{"ldapUrl":"ldaps://adntadmin.lb.someplace:636","groupSearchFirstEnabled":"true","groupSearchEnabled":"true","userSearchEnabled":"true","userSearchFilter":"(&(objectclass=person)(|(uSNChanged>=390680187)(modifyTimestamp>=19700105123120Z))(|(memberof=cn=ACG-CGM-DBPersonal,ou=Account
Groups,ou=ITS
Security,dc=pc,dc=internal,dc=someplace,dc=com)(memberof=CN=ACG-CGM-DB-Generic-Account,OU=Account
Groups,OU=ITS
Security,DC=pc,DC=internal,DC=someplace,DC=com)))","groupSearchFilter":"(&(objectclass=groupofnames)(|(uSNChanged>=0)(modifyTimestamp>=19700101000000Z)))","groupHierarchyLevel":"0","totalUsersSynced":2452,"totalGroupsSynced":35890,"totalUsersDeleted":0,"totalGroupsDeleted":0},"unixSyncSourceInfo":null,"fileSyncSourceInfo":null}
02 Jan 2025 18:31:15 WARN o.a.r.u.p.PolicyMgrUserGroupBuilder
[UnixUserSyncThread] - Credentials response from ranger is 401.
02 Jan 2025 18:31:15 DEBUG o.a.r.u.p.PolicyMgrUserGroupBuilder
[UnixUserSyncThread] - <==
PolicyMgrUserGroupBuilder.tryUploadEntityInfoWithCred()
02 Jan 2025 18:31:15 DEBUG o.a.r.u.p.PolicyMgrUserGroupBuilder
[UnixUserSyncThread] - <== PolicyMgrUserGroupBuilder.cookieBasedUploadEntity()
02 Jan 2025 18:31:15 DEBUG o.a.r.u.p.PolicyMgrUserGroupBuilder
[UnixUserSyncThread] - REST response from /service/xusers/ugsync/auditinfo/ :
{"statusCode":401,"msgDesc":"Authentication Failed"}
02 Jan 2025 18:31:15 DEBUG o.a.r.u.p.PolicyMgrUserGroupBuilder
[UnixUserSyncThread] - AuditInfo Creation successful
Any suggestions to resolve this?
----------------------------------------------------------------------
This email and any attachment is confidential. If you are not the intended
recipient, please contact the sender and delete this message. Macquarie does
not represent or warrant that this communication is free from computer viruses
or other defects. For important disclosures and information about the
incorporation and regulated status of Macquarie Group entities please see:
www.macquarie.com/disclosures
