>
> hi .
> I have configured Ranger (4.0) on my 4 node node HDP 2.2.6 cluster.
> User sync and validation is through windows AD (2008).
>
> ----WHAT WORKS-----
> Designated users and corresponding groups are successfully sync'd into
> ranger admin. I am able to login with my AD id/pass into ranger as user.. i
> also see appropriate groups associated to each user.
>
> ---- ISSUES ------
> When i assign HDFS policy to groups the same is not effective and gives me
> access denied on the resource. But if same policy is assigned to the users
> directly then i am able to access the resource. Does any one have hints to
> help on this?
>
> in addition to this .. while AD imported users are marked as "external"
> ..the groups are getting marked as "internal" . ...
>
> Ranger admin/ portal access logs are not helping much ..
>
> *Thanks in Advance !!*
> Arvind
>
