[jira] [Assigned] (RANGER-4043) [ugsync]Enumerate Groups will give error on executing 'getent group' command

["Fateh Singh (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/RANGER-4043?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Fateh Singh reassigned RANGER-4043:
-----------------------------------

    Assignee: Fateh Singh

> [ugsync]Enumerate Groups will give error on executing 'getent group' command
> ----------------------------------------------------------------------------
>
>                 Key: RANGER-4043
>                 URL: https://issues.apache.org/jira/browse/RANGER-4043
>             Project: Ranger
>          Issue Type: Bug
>          Components: Ranger
>            Reporter: Abhishek Pal
>            Assignee: Fateh Singh
>            Priority: Major
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> Currently in the Ranger usersync code for UnixUserSync the enumerate group option accepts group as comma separated values.
> Example:
> {code:java}
> ranger.usersync.group.enumerate: true
> ranger.usersync.group.enumerategroup: test_group1,test_group2
> {code}
> However in the code
> *ugsync/src/main/java/org/apache/ranger/process*
> *UnixUserGroupBuilder.java -> buildUnixGroupList()*
> when {*}enumerateGroups is set{*}, the line:
> {code:java}
> String[] cmd = new String[] {"bash", "-c", command + " '" + group + "'"};
> {code}
> will create the command as:
> *bash -c getent group <group_name> '<group_name>'*
> {code:java}
> bash -c getent group test_group1 'test_group1'
> {code}
> which is an invalid command as *getent* takes one argument.
> This will return an exit-code 2 with error.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)