You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@ranger.apache.org by Loïc CHANEL <lo...@telecomnancy.net> on 2024/02/08 11:30:48 UTC
[Usersync] Fetch several attributes
Hi guys,
As I'm pulling Ranger users from LDAP, I would like not only to pull the
username from there but also the first and last name, and most importantly
the email address of the LDAP user. This led me to an old Jira
<https://issues.apache.org/jira/browse/RANGER-567> that asks for just that
feature (the person who answers has an oddly familiar first name), which
makes me think it has not been implemented yet.
Am I correct ? If so, how hard would it be to develop and maintain that
feature ?
In parallel, is there a way to modify the users post-import in order to
enrich the first name/last name/email fields ?
Thanks for your help,
Loïc CHANEL
Technical leader Big Data
Capgemini (Lyon, France)
Re: [Usersync] Fetch several attributes
Posted by Loïc CHANEL <lo...@telecomnancy.net>.
Hi guys,
I went to take a look at the code, I think I can develop the part I'm
missing (pulling First Name, Last Name and Email Address fields from the
LDAP/AD if the user provides the fields where to get these information in
the LDAP/AD).
Now this brings 2 questions :
- How probable is it that my modification could be accepted in the main
Ranger branch ?
- When is the next Ranger release scheduled for ?
To be clear, I really need that feature so if it isn't part of Ranger
usersync roadmap I will have to develop a minimalistic Ranger usersync
module that does it (and in my opinion it's a shame not making it available
to the community).
What's your opinion on this?
Thanks,
Loïc CHANEL
Technical leader Big Data
Capgemini (Lyon, France)
Le ven. 16 févr. 2024 à 16:43, Loïc CHANEL <lo...@telecomnancy.net> a
écrit :
> Hi Sailaja,
>
> I was finally able to understand what's been developed. Actually, if the
> email was in the pulled information this would have been great, but
> unfortunately this doesn't bring too much information in my case.
> Can we add other properties to be pulled dynamically from the LDAP ?
> Thanks,
>
> Loïc CHANEL
> Technical leader Big Data
> Capgemini (Lyon, France)
>
>
> Le jeu. 15 févr. 2024 à 09:38, Loïc CHANEL <lo...@telecomnancy.net>
> a écrit :
>
>> Hi Sailaja,
>> From the look of it, I'd say it could work for my use case. Do you know
>> where I could find some documentation about using that feature ?
>> Thanks,
>>
>> Loïc
>>
>> Le mer. 14 févr. 2024 à 18:05, Sailaja Polavarapu <
>> spolavarapu@cloudera.com> a écrit :
>>
>>> Hi Loïc CHANEL,
>>> Syncing extra attributes from AD/LDAP is partly supported as part of
>>> RANGER-2697 <https://issues.apache.org/jira/browse/RANGER-2697>. Can
>>> you please check it out and see if this works for your use case? It is not
>>> exactly what you are asking for, but in Usersync, there is an option to
>>> sync other attributes which are stored as key-value pairs in
>>> the otherAttributes field for each user/group.
>>> - Sailaja.
>>>
>>> On Wed, Feb 14, 2024 at 8:00 AM Loïc CHANEL <
>>> loic.chanel@telecomnancy.net> wrote:
>>>
>>>> Hi guys,
>>>>
>>>> I understand the feature is still not available at the moment, so 2
>>>> questions :
>>>> - I gave a look at the current code, I don't think the development of
>>>> such a feature would be too hard. If I develop it, could it be merged
>>>> easily ?
>>>> - Is there a way to modify the users post-import in order to enrich the
>>>> first name/last name/email fields (manually or with an API) ?
>>>>
>>>> Thanks for your help,
>>>>
>>>>
>>>> Loïc CHANEL
>>>> Technical leader Big Data
>>>> Capgemini (Lyon, France)
>>>>
>>>>
>>>> Le jeu. 8 févr. 2024 à 12:30, Loïc CHANEL <lo...@telecomnancy.net>
>>>> a écrit :
>>>>
>>>>> Hi guys,
>>>>>
>>>>> As I'm pulling Ranger users from LDAP, I would like not only to pull
>>>>> the username from there but also the first and last name, and most
>>>>> importantly the email address of the LDAP user. This led me to an old
>>>>> Jira <https://issues.apache.org/jira/browse/RANGER-567> that asks for
>>>>> just that feature (the person who answers has an oddly familiar first
>>>>> name), which makes me think it has not been implemented yet.
>>>>> Am I correct ? If so, how hard would it be to develop and
>>>>> maintain that feature ?
>>>>> In parallel, is there a way to modify the users post-import in order
>>>>> to enrich the first name/last name/email fields ?
>>>>> Thanks for your help,
>>>>>
>>>>>
>>>>> Loïc CHANEL
>>>>> Technical leader Big Data
>>>>> Capgemini (Lyon, France)
>>>>>
>>>>
Re: [Usersync] Fetch several attributes
Posted by Loïc CHANEL <lo...@telecomnancy.net>.
Hi Sailaja,
I was finally able to understand what's been developed. Actually, if the
email was in the pulled information this would have been great, but
unfortunately this doesn't bring too much information in my case.
Can we add other properties to be pulled dynamically from the LDAP ?
Thanks,
Loïc CHANEL
Technical leader Big Data
Capgemini (Lyon, France)
Le jeu. 15 févr. 2024 à 09:38, Loïc CHANEL <lo...@telecomnancy.net> a
écrit :
> Hi Sailaja,
> From the look of it, I'd say it could work for my use case. Do you know
> where I could find some documentation about using that feature ?
> Thanks,
>
> Loïc
>
> Le mer. 14 févr. 2024 à 18:05, Sailaja Polavarapu <
> spolavarapu@cloudera.com> a écrit :
>
>> Hi Loïc CHANEL,
>> Syncing extra attributes from AD/LDAP is partly supported as part of
>> RANGER-2697 <https://issues.apache.org/jira/browse/RANGER-2697>. Can
>> you please check it out and see if this works for your use case? It is not
>> exactly what you are asking for, but in Usersync, there is an option to
>> sync other attributes which are stored as key-value pairs in
>> the otherAttributes field for each user/group.
>> - Sailaja.
>>
>> On Wed, Feb 14, 2024 at 8:00 AM Loïc CHANEL <lo...@telecomnancy.net>
>> wrote:
>>
>>> Hi guys,
>>>
>>> I understand the feature is still not available at the moment, so 2
>>> questions :
>>> - I gave a look at the current code, I don't think the development of
>>> such a feature would be too hard. If I develop it, could it be merged
>>> easily ?
>>> - Is there a way to modify the users post-import in order to enrich the
>>> first name/last name/email fields (manually or with an API) ?
>>>
>>> Thanks for your help,
>>>
>>>
>>> Loïc CHANEL
>>> Technical leader Big Data
>>> Capgemini (Lyon, France)
>>>
>>>
>>> Le jeu. 8 févr. 2024 à 12:30, Loïc CHANEL <lo...@telecomnancy.net>
>>> a écrit :
>>>
>>>> Hi guys,
>>>>
>>>> As I'm pulling Ranger users from LDAP, I would like not only to pull
>>>> the username from there but also the first and last name, and most
>>>> importantly the email address of the LDAP user. This led me to an old
>>>> Jira <https://issues.apache.org/jira/browse/RANGER-567> that asks for
>>>> just that feature (the person who answers has an oddly familiar first
>>>> name), which makes me think it has not been implemented yet.
>>>> Am I correct ? If so, how hard would it be to develop and maintain that
>>>> feature ?
>>>> In parallel, is there a way to modify the users post-import in order to
>>>> enrich the first name/last name/email fields ?
>>>> Thanks for your help,
>>>>
>>>>
>>>> Loïc CHANEL
>>>> Technical leader Big Data
>>>> Capgemini (Lyon, France)
>>>>
>>>
Re: [Usersync] Fetch several attributes
Posted by Loïc CHANEL <lo...@telecomnancy.net>.
Hi Sailaja,
From the look of it, I'd say it could work for my use case. Do you know
where I could find some documentation about using that feature ?
Thanks,
Loïc
Le mer. 14 févr. 2024 à 18:05, Sailaja Polavarapu <sp...@cloudera.com>
a écrit :
> Hi Loïc CHANEL,
> Syncing extra attributes from AD/LDAP is partly supported as part of
> RANGER-2697 <https://issues.apache.org/jira/browse/RANGER-2697>. Can
> you please check it out and see if this works for your use case? It is not
> exactly what you are asking for, but in Usersync, there is an option to
> sync other attributes which are stored as key-value pairs in
> the otherAttributes field for each user/group.
> - Sailaja.
>
> On Wed, Feb 14, 2024 at 8:00 AM Loïc CHANEL <lo...@telecomnancy.net>
> wrote:
>
>> Hi guys,
>>
>> I understand the feature is still not available at the moment, so 2
>> questions :
>> - I gave a look at the current code, I don't think the development of
>> such a feature would be too hard. If I develop it, could it be merged
>> easily ?
>> - Is there a way to modify the users post-import in order to enrich the
>> first name/last name/email fields (manually or with an API) ?
>>
>> Thanks for your help,
>>
>>
>> Loïc CHANEL
>> Technical leader Big Data
>> Capgemini (Lyon, France)
>>
>>
>> Le jeu. 8 févr. 2024 à 12:30, Loïc CHANEL <lo...@telecomnancy.net>
>> a écrit :
>>
>>> Hi guys,
>>>
>>> As I'm pulling Ranger users from LDAP, I would like not only to pull the
>>> username from there but also the first and last name, and most importantly
>>> the email address of the LDAP user. This led me to an old Jira
>>> <https://issues.apache.org/jira/browse/RANGER-567> that asks for just
>>> that feature (the person who answers has an oddly familiar first name),
>>> which makes me think it has not been implemented yet.
>>> Am I correct ? If so, how hard would it be to develop and maintain that
>>> feature ?
>>> In parallel, is there a way to modify the users post-import in order to
>>> enrich the first name/last name/email fields ?
>>> Thanks for your help,
>>>
>>>
>>> Loïc CHANEL
>>> Technical leader Big Data
>>> Capgemini (Lyon, France)
>>>
>>
Re: [Usersync] Fetch several attributes
Posted by Sailaja Polavarapu <sp...@cloudera.com>.
Hi Loïc CHANEL,
Syncing extra attributes from AD/LDAP is partly supported as part of
RANGER-2697 <https://issues.apache.org/jira/browse/RANGER-2697>. Can
you please check it out and see if this works for your use case? It is not
exactly what you are asking for, but in Usersync, there is an option to
sync other attributes which are stored as key-value pairs in
the otherAttributes field for each user/group.
- Sailaja.
On Wed, Feb 14, 2024 at 8:00 AM Loïc CHANEL <lo...@telecomnancy.net>
wrote:
> Hi guys,
>
> I understand the feature is still not available at the moment, so 2
> questions :
> - I gave a look at the current code, I don't think the development of such
> a feature would be too hard. If I develop it, could it be merged easily ?
> - Is there a way to modify the users post-import in order to enrich the
> first name/last name/email fields (manually or with an API) ?
>
> Thanks for your help,
>
>
> Loïc CHANEL
> Technical leader Big Data
> Capgemini (Lyon, France)
>
>
> Le jeu. 8 févr. 2024 à 12:30, Loïc CHANEL <lo...@telecomnancy.net>
> a écrit :
>
>> Hi guys,
>>
>> As I'm pulling Ranger users from LDAP, I would like not only to pull the
>> username from there but also the first and last name, and most importantly
>> the email address of the LDAP user. This led me to an old Jira
>> <https://issues.apache.org/jira/browse/RANGER-567> that asks for just
>> that feature (the person who answers has an oddly familiar first name),
>> which makes me think it has not been implemented yet.
>> Am I correct ? If so, how hard would it be to develop and maintain that
>> feature ?
>> In parallel, is there a way to modify the users post-import in order to
>> enrich the first name/last name/email fields ?
>> Thanks for your help,
>>
>>
>> Loïc CHANEL
>> Technical leader Big Data
>> Capgemini (Lyon, France)
>>
>
Re: [Usersync] Fetch several attributes
Posted by Loïc CHANEL <lo...@telecomnancy.net>.
Hi guys,
I understand the feature is still not available at the moment, so 2
questions :
- I gave a look at the current code, I don't think the development of such
a feature would be too hard. If I develop it, could it be merged easily ?
- Is there a way to modify the users post-import in order to enrich the
first name/last name/email fields (manually or with an API) ?
Thanks for your help,
Loïc CHANEL
Technical leader Big Data
Capgemini (Lyon, France)
Le jeu. 8 févr. 2024 à 12:30, Loïc CHANEL <lo...@telecomnancy.net> a
écrit :
> Hi guys,
>
> As I'm pulling Ranger users from LDAP, I would like not only to pull the
> username from there but also the first and last name, and most importantly
> the email address of the LDAP user. This led me to an old Jira
> <https://issues.apache.org/jira/browse/RANGER-567> that asks for just
> that feature (the person who answers has an oddly familiar first name),
> which makes me think it has not been implemented yet.
> Am I correct ? If so, how hard would it be to develop and maintain that
> feature ?
> In parallel, is there a way to modify the users post-import in order to
> enrich the first name/last name/email fields ?
> Thanks for your help,
>
>
> Loïc CHANEL
> Technical leader Big Data
> Capgemini (Lyon, France)
>