[jira] [Created] (RANGER-1606) Case insensitive user/group ACL matching

["Hari Sekhon (JIRA)" <ji...@apache.org>]

Hari Sekhon created RANGER-1606:
-----------------------------------

             Summary: Case insensitive user/group ACL matching
                 Key: RANGER-1606
                 URL: https://issues.apache.org/jira/browse/RANGER-1606
             Project: Ranger
          Issue Type: Improvement
          Components: admin, Ranger, usersync
    Affects Versions: 0.6.0
         Environment: HDP 2.5
            Reporter: Hari Sekhon


Make ACL matching case insensitive for users/groups.

Ranger imports LDAP users/groups while preserving case by default, but Active Directory environments with uppercase users/groups often import to lowercase at the OS level (eg.Centrify), causing unintuitive ACL mismatches as Ranger is doing case sensitive ACL matching. I've seen this issue at a couple of large financials now and while it's easily to workaround by configuring lowercasing on user/group imports it could be handled better automatically similar to the way Ambari changed to make user/group handling case insensitive (AMBARI-17383), rather than having to fix it on an environment by environment basis.

This could have a config setting to disable case insensitive ACL matches to maintain backwards compatibility if needed.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)