You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@ranger.apache.org by Sailaja Polavarapu <sp...@hortonworks.com> on 2016/04/05 22:18:48 UTC

Review Request 45771: RANGER-893: Ranger ugsync with LDAP is not able to fetch group information with user's short name as the member attribute

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/45771/
-----------------------------------------------------------

Review request for ranger, Alok Lal, Don Bosco Durai, Abhay Kulkarni, Madhan Neethiraj, Ramesh Mani, and Velmurugan Periasamy.

Bugs: RANGER-893
https://issues.apache.org/jira/browse/RANGER-893

Repository: ranger

Description
-------

Added support to ranger usersync to compute group membership using user's short name for user based search. Similar support is added to fetch users using user's short name for Group based search as well.
Rearranged the username case conversion and username transformation logic code so that these rules are applied just before posting the userinfo to ranger admin.

Diffs
-----

ugsync/src/main/java/org/apache/ranger/ldapusersync/process/LdapUserGroupBuilder.java e68a52f
ugsync/src/main/java/org/apache/ranger/unixusersync/config/UserGroupSyncConfig.java 2297b65
ugsync/src/test/java/org/apache/ranger/usergroupsync/LdapUserGroupTest.java df8adf3
ugsync/src/test/resources/ADSchema.ldif 59402f1
ugsync/src/test/resources/ranger-ugsync-site.xml 1bd07d1

Diff: https://reviews.apache.org/r/45771/diff/

Testing
-------

1. Added unit test cases to cover the user based search as well as group based search using user's short name.
2. Configured OpenLdap Server (test instance) to use user's short name as the member attribute (memberuid) for some of the groups (posixGroups). Performed functional tests against the test instance OpenLdap Server for both Group based search and User based search test cases.
3. Also performed some regression test with OpenLdap and AD servers.

Thanks,

Sailaja Polavarapu

Re: Review Request 45771: RANGER-893: Ranger ugsync with LDAP is not able to fetch group information with user's short name as the member attribute

Posted by Velmurugan Periasamy <vp...@hortonworks.com>.

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/45771/#review129015
-----------------------------------------------------------


Ship it!




Ship It!

- Velmurugan Periasamy


On April 13, 2016, 5:57 p.m., Sailaja Polavarapu wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/45771/
> -----------------------------------------------------------
> 
> (Updated April 13, 2016, 5:57 p.m.)
> 
> 
> Review request for ranger, Alok Lal, Don Bosco Durai, Abhay Kulkarni, Madhan Neethiraj, Ramesh Mani, and Velmurugan Periasamy.
> 
> 
> Bugs: RANGER-893
>     https://issues.apache.org/jira/browse/RANGER-893
> 
> 
> Repository: ranger
> 
> 
> Description
> -------
> 
> Added support to ranger usersync to compute group membership using user's short name for user based search. Similar support is added to fetch users using user's short name for Group based search as well. 
> Rearranged the username case conversion and username transformation logic code so that these rules are applied just before posting the userinfo to ranger admin.
> 
> 
> Diffs
> -----
> 
>   ugsync/src/test/resources/ranger-ugsync-site.xml 1bd07d1 
> 
> Diff: https://reviews.apache.org/r/45771/diff/
> 
> 
> Testing
> -------
> 
> 1. Added unit test cases to cover the user based search as well as group based search using user's short name.
> 2. Configured OpenLdap Server (test instance) to use user's short name as the member attribute (memberuid) for some of the groups (posixGroups). Performed functional tests against the test instance OpenLdap Server for both Group based search and User based search test cases.
> 3. Also performed some regression test with OpenLdap and AD servers.
> 
> 
> Thanks,
> 
> Sailaja Polavarapu
> 
>

Re: Review Request 45771: RANGER-893: Ranger ugsync with LDAP is not able to fetch group information with user's short name as the member attribute

Posted by Sailaja Polavarapu <sp...@hortonworks.com>.

(Updated April 13, 2016, 5:57 p.m.)