You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ambari.apache.org by "Robert Levas (JIRA)" <ji...@apache.org> on 2015/04/16 11:09:58 UTC
[jira] [Assigned] (AMBARI-10513) ambari-server sync-ldap fails if
there are too many users in the LDAP server (more than 1000?)
[ https://issues.apache.org/jira/browse/AMBARI-10513?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Robert Levas reassigned AMBARI-10513:
-------------------------------------
Assignee: Robert Levas
> ambari-server sync-ldap fails if there are too many users in the LDAP server (more than 1000?)
> ----------------------------------------------------------------------------------------------
>
> Key: AMBARI-10513
> URL: https://issues.apache.org/jira/browse/AMBARI-10513
> Project: Ambari
> Issue Type: Bug
> Components: ambari-server
> Affects Versions: 2.0.0
> Reporter: Emil Anca
> Assignee: Robert Levas
> Fix For: 2.1.0
>
>
> ambari-server setup-ldap was performed against QE AD server, which has more than 2000 users.
> [root@c6401 ~]# ambari-server sync-ldap --all
> Using python /usr/bin/python2.6
> Syncing with LDAP...
> Enter Ambari Admin login: admin
> Enter Ambari Admin password:
> Syncing all.......ERROR: Exiting with exit code 1.
> REASON: Caught exception running LDAP sync. [LDAP: error code 4 - Sizelimit Exceeded]; nested exception is javax.naming.SizeLimitExceededException: [LDAP: error code 4 - Sizelimit Exceeded]; remaining name 'CN=Users,DC=scl42,DC=hortonworks,DC=com'
> Dilli Arumugam told me that Ranger (formerly known as XASecure) also hit a similar issue: BUG-23578.
> BUG-31217: Attempting to sync LDAP that contains > 1000 entities fails.
> Problem: If your directory contains > 1000 users, attempts to sync-ldap users and groups to Ambari will fail. There is a limit of 1000 to the number of entities Ambari can process.
> Solution: Perform the sync-ldap using the --users and --groups option to limit the amount of entities to be under 1000 and perform the sync in batches.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)