You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ranger.apache.org by co...@apache.org on 2017/06/09 10:27:25 UTC
ranger git commit: Extra debug logging in UserSync Group Search
Repository: ranger
Updated Branches:
refs/heads/master 93b489e4c -> 2814f71fa
Extra debug logging in UserSync Group Search
When debugging issues with group search it can be hard to understand why
groups are not being found because the specific LDAP search filters used
i.e. That the filter templates with placeholders filled are not logged.
This adds extra debug logging so when log level is DEBUG the exact LDAP
search filter to be used will be logged. Users can then test this
filter directly against their LDAP server to determine why it is
incorrect and then adjust their configuration appropriately.
Signed-off-by: Colm O hEigeartaigh <co...@apache.org>
Project: http://git-wip-us.apache.org/repos/asf/ranger/repo
Commit: http://git-wip-us.apache.org/repos/asf/ranger/commit/2814f71f
Tree: http://git-wip-us.apache.org/repos/asf/ranger/tree/2814f71f
Diff: http://git-wip-us.apache.org/repos/asf/ranger/diff/2814f71f
Branch: refs/heads/master
Commit: 2814f71fa3fc4d31836ff55eddaff5d49e34494c
Parents: 93b489e
Author: Rob Vesse <rv...@dotnetrdf.org>
Authored: Wed May 24 11:19:53 2017 +0100
Committer: Colm O hEigeartaigh <co...@apache.org>
Committed: Fri Jun 9 11:19:27 2017 +0100
----------------------------------------------------------------------
.../ranger/ldapusersync/process/LdapUserGroupBuilder.java | 5 +++++
1 file changed, 5 insertions(+)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/ranger/blob/2814f71f/ugsync/src/main/java/org/apache/ranger/ldapusersync/process/LdapUserGroupBuilder.java
----------------------------------------------------------------------
diff --git a/ugsync/src/main/java/org/apache/ranger/ldapusersync/process/LdapUserGroupBuilder.java b/ugsync/src/main/java/org/apache/ranger/ldapusersync/process/LdapUserGroupBuilder.java
index 8cf6816..3168a19 100644
--- a/ugsync/src/main/java/org/apache/ranger/ldapusersync/process/LdapUserGroupBuilder.java
+++ b/ugsync/src/main/java/org/apache/ranger/ldapusersync/process/LdapUserGroupBuilder.java
@@ -599,6 +599,11 @@ public class LdapUserGroupBuilder extends AbstractUserGroupSource {
LOG.error("No user information provided for group search!");
return;
}
+ if (LOG.isDebugEnabled()) {
+ LOG.debug("Searching for groups for user " + userInfo.getUserName() +
+ " using filter " + String.format(extendedGroupSearchFilter, userInfo.getUserFullName(),
+ userInfo.getUserName()));
+ }
groupSearchResultEnum = ldapContext
.search(groupSearchBase[ou], extendedGroupSearchFilter,
new Object[]{userInfo.getUserFullName(), userInfo.getUserName()},