You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by "Sailaja Polavarapu (Jira)" <ji...@apache.org> on 2021/03/16 14:25:00 UTC

[jira] [Created] (RANGER-3207) Graceful handling of invalid usernames for usersync

Sailaja Polavarapu created RANGER-3207:
------------------------------------------

             Summary: Graceful handling of invalid usernames for usersync
                 Key: RANGER-3207
                 URL: https://issues.apache.org/jira/browse/RANGER-3207
             Project: Ranger
          Issue Type: Bug
          Components: Ranger, usersync
            Reporter: Sailaja Polavarapu


Currently, if there is an invalid username in a batch of users that usersync tries to create in ranger admin, the entire batch of users will fail to create. Usersync will then perpetually retry creating these users. This leads to no alerts in Ranger, CM, or anywhere else besides usersync/admin logs, both of which lack necessary details like the offending username.
In the current state, usersync is unusable if there is a single bad username in the source database.

Usersync has to be more robust against malformed user names. IMO two ways forward could be:
 * (preferred) Allow partial failures, ie. create users that have well-formed names even if a batch has a malformed user name, or
 * Have a filter built into usersync that catches these before they reach admin

Regardless of the solution, the error message should include the offending username, and usersync should not keep trying to create users that are known to cause failures.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)