Dear Lune,
for LDAP/AD sync time is 1 hr. default , it does not matter what is set in sleeptimeinmillisbetweensynccycl?e. This is to avoid making call to the ldap so frequently. ranger.usersync.sleeptimeinmillisbetweensynccycl is configurable for UNIX/file sync source. I guess you can restart usersync if you want to sync immediately. -Thanks, Deepak ________________________________ From: Lune Silver <lunescar.ran...@gmail.com> Sent: Friday, June 24, 2016 5:48 PM To: user@ranger.incubator.apache.org Subject: Frequency of synchronization for usersync cannot be less than one hour Hello ! I'm using HDP 2.3.4.7 and Ambari 2.2.1. I enabled the group syncing in addition to user syncing in the tab "Ranger User info" in the sub-tab "Group Configs". At 11h46 today, I created a group and added a user in this group. ### # ipa group-add test11h46 Description: test11h46 ----------------------- Added group "test11h46" ----------------------- Group name: test11h46 Description: test11h46 ### ### # ipa group-add-member test11h46 --users=myuser Group name: test11h46 Description: test11h46 Member users: myuser ------------------------- Number of members added 1 ------------------------- ### I checked regularly if I can find this group in the logs or ranger usersync, and didn't find anything. This should be governed by ranger.usersync.sleeptimeinmillisbetweensynccycl and the description of this property says the following thing : ### Sleeptime interval in milliseconds. If < 1000 then default to 30 sec. ### This is not the case. I put 5 minuts for this property (300000 milliseconds) and it does not sync at this frequency. Finally I saw that this sync occures indeed, but every hour, not below. Q1 - Is is normal ? Q2 - How can I put a value below 1 hour. Is it possible ? I know 30s is too much and could risk to overwhelm the ldap, but once every 5-10 minuts seemed OK to me. One hour seems overkill. BR. Lune
