You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by Velmurugan Periasamy <vp...@hortonworks.com> on 2017/08/22 00:53:18 UTC
Re: Review Request 61008: RANGER-1632: Fixed issue where Users are not
sync'd when sAMAccountName is different than CN associated with groups
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/61008/#review183417
-----------------------------------------------------------
Ship it!
Ship It!
- Velmurugan Periasamy
On July 20, 2017, 9:55 p.m., Sailaja Polavarapu wrote:
>
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/61008/
> -----------------------------------------------------------
>
> (Updated July 20, 2017, 9:55 p.m.)
>
>
> Review request for ranger, Ankita Sinha, Gautam Borad, Abhay Kulkarni, Madhan Neethiraj, Pradeep Agrawal, Ramesh Mani, Selvamohan Neethiraj, and Velmurugan Periasamy.
>
>
> Bugs: RANGER-1632
> https://issues.apache.org/jira/browse/RANGER-1632
>
>
> Repository: ranger
>
>
> Description
> -------
>
> Saving full DN from User search and group search inorder to get the user group mapping. This is used for both user based search and group based search. Also modified unit tests/test schema inorder to validate the changes.
>
>
> Diffs
> -----
>
> ugsync/src/main/java/org/apache/ranger/ldapusersync/process/LdapDeltaUserGroupBuilder.java 645a248
> ugsync/src/main/java/org/apache/ranger/unixusersync/config/UserGroupSyncConfig.java 19343b2
> ugsync/src/test/java/org/apache/ranger/usergroupsync/TestLdapUserGroup.java e5bf110
> ugsync/src/test/resources/ADSchema.ldif 8366d3a
>
>
> Diff: https://reviews.apache.org/r/61008/diff/1/
>
>
> Testing
> -------
>
> 1. Successfully ran exiting and new unit tests for regression and new functionality
> 2. Performed functional tests with syncing users from AD with and without same sAMAccountName for the users associated with groups.
> 3. Also, modified test AD with 100k Users to have different sAMAccountName for the users than CN associated with groups. Used this new data to run some usersync performace tests (100k users and 5k groups) for both user based search and group based search.
>
>
> Thanks,
>
> Sailaja Polavarapu
>
>