[jira] [Created] (AMBARI-10513) ambari-server sync-ldap fails if there are too many users in the LDAP server (more than 1000?)

["Emil Anca (JIRA)" <ji...@apache.org>]

Emil Anca created AMBARI-10513:
----------------------------------

             Summary: ambari-server sync-ldap fails if there are too many users in the LDAP server (more than 1000?)
                 Key: AMBARI-10513
                 URL: https://issues.apache.org/jira/browse/AMBARI-10513
             Project: Ambari
          Issue Type: Bug
          Components: ambari-server
    Affects Versions: 2.0.0
            Reporter: Emil Anca
             Fix For: 2.1.0


ambari-server setup-ldap was performed against QE AD server, which has more than 2000 users.
[root@c6401 ~]# ambari-server sync-ldap --all
Using python  /usr/bin/python2.6
Syncing with LDAP...
Enter Ambari Admin login: admin
Enter Ambari Admin password:
Syncing all.......ERROR: Exiting with exit code 1.
REASON: Caught exception running LDAP sync. [LDAP: error code 4 - Sizelimit Exceeded]; nested exception is javax.naming.SizeLimitExceededException: [LDAP: error code 4 - Sizelimit Exceeded]; remaining name 'CN=Users,DC=scl42,DC=hortonworks,DC=com'
Dilli Arumugam told me that Ranger (formerly known as XASecure) also hit a similar issue: BUG-23578.
BUG-31217: Attempting to sync LDAP that contains > 1000 entities fails.
Problem: If your directory contains > 1000 users, attempts to sync-ldap users and groups to Ambari will fail. There is a limit of 1000 to the number of entities Ambari can process.
Solution: Perform the sync-ldap using the --users and --groups option to limit the amount of entities to be under 1000 and perform the sync in batches.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)