[jira] [Commented] (RANGER-5466) Unnecessary delta sync filter applied in LDAP search when delta sync is disabled

["Pradeep Agrawal (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/RANGER-5466?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18109773#comment-18109773 ] 

Pradeep Agrawal commented on RANGER-5466:
-----------------------------------------

[~kimsehwan96] : can you rebase the branch from apache master

> Unnecessary delta sync filter applied in LDAP search when delta sync is disabled
> --------------------------------------------------------------------------------
>
>                 Key: RANGER-5466
>                 URL: https://issues.apache.org/jira/browse/RANGER-5466
>             Project: Ranger
>          Issue Type: Bug
>          Components: usersync
>    Affects Versions: 2.7.0
>            Reporter: sehwan kim
>            Priority: Major
>          Time Spent: 20m
>  Remaining Estimate: 0h
>
> In setup.py, when SYNC_SOURCE is set to LDAP, ranger.usersync.ldap.deltasync is unconditionally hardcoded to "true". This prevents users from disabling delta sync even if they explicitly set it to false in install.properties.
> In LdapUserGroupBuilder, the LDAP search filter always includes delta sync conditions(uSNChanged, modifyTimestamp) regardless of whether delta sync is enabled.
> When disabled, epoch-based values are used which effectively match all records, 
> so it does not cause incorrect results but adds unnecessary filter conditions to every LDAP query.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)