You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by "Abhishek Kumar (Jira)" <ji...@apache.org> on 2023/05/08 20:10:00 UTC

[jira] [Updated] (RANGER-4230) Bulk delete all external users & groups in Ranger with REST API

     [ https://issues.apache.org/jira/browse/RANGER-4230?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Abhishek Kumar updated RANGER-4230:
-----------------------------------
    Description: 
Ranger admin should have an option to clean up all external users/groups from ranger DB. 

Due to incorrect ranger usersync configuration, specially using LDAP/AD, large number of users and groups end up in ranger. 

Large user/group and mapping tables have the potential to cause issues related to ranger admin OOM. Existing REST APIs for deletion are slow and only allow one user/group deletion at a time.

A Ranger API option to clean up external user and groups (or bulk delete user/groups) will be much helpful to address the issues indicated above.

This Jira only tracks changes for the REST API, a UI option can also be enabled as part another Jira to use the same functionality.

  was:
Ranger admin should have option to clean up all the users from ranger DB. 

Due to incorrect ranger usersync configuration, specially using LDAP/AD, large number of users and groups end up in ranger. 

Large user/group and mapping tables have the potential to cause issues related to ranger admin OOM. Existing REST APIs for deletion are slow and only allow one user/group deletion at a time.


A Ranger API option to clean up external user and groups (or bulk delete user/groups) will be much helpful to address the issues indicated above.

This Jira only tracks changes for the REST API, a UI option can also be enabled as part another Jira to use the same functionality.


> Bulk delete all external users & groups in Ranger with REST API
> ---------------------------------------------------------------
>
>                 Key: RANGER-4230
>                 URL: https://issues.apache.org/jira/browse/RANGER-4230
>             Project: Ranger
>          Issue Type: New Feature
>          Components: Ranger
>    Affects Versions: 2.4.0
>            Reporter: Abhishek Kumar
>            Assignee: Abhishek Kumar
>            Priority: Major
>             Fix For: 3.0.0
>
>   Original Estimate: 336h
>  Remaining Estimate: 336h
>
> Ranger admin should have an option to clean up all external users/groups from ranger DB. 
> Due to incorrect ranger usersync configuration, specially using LDAP/AD, large number of users and groups end up in ranger. 
> Large user/group and mapping tables have the potential to cause issues related to ranger admin OOM. Existing REST APIs for deletion are slow and only allow one user/group deletion at a time.
> A Ranger API option to clean up external user and groups (or bulk delete user/groups) will be much helpful to address the issues indicated above.
> This Jira only tracks changes for the REST API, a UI option can also be enabled as part another Jira to use the same functionality.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)