ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Don Bosco Durai (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (RANGER-684) Ranger Usersync - Add Ability to transform user/group names
Date Thu, 08 Oct 2015 06:26:27 GMT

    [ https://issues.apache.org/jira/browse/RANGER-684?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14948151#comment-14948151

Don Bosco Durai commented on RANGER-684:

I think, we should keep it simple. Just transform minimally so it matches what the hadoop
admin might have done in auth_to_local. Also, Ranger main purpose of UserSync is just to help
in creating the policies in Ranger. 

Supporting regex or javascript will give admin the option to map user properly in Ranger.

[~aloklal99], for now we should avoid mapping at the plugin side. I think, we should just
let Hadoop auto_to_local do it. 

> Ranger Usersync - Add Ability to transform user/group names
> -----------------------------------------------------------
>                 Key: RANGER-684
>                 URL: https://issues.apache.org/jira/browse/RANGER-684
>             Project: Ranger
>          Issue Type: Improvement
>    Affects Versions: 0.4.0, 0.5.0
>            Reporter: Velmurugan Periasamy
>            Assignee: Sailaja Polavarapu
>            Priority: Critical
>             Fix For: 0.5.1, 0.6.0
> Ensure the UserSync is capable of transforming user/group names from LDAP/AD source.
Probably by allowing custom mapping ( like space to underscore) 

This message was sent by Atlassian JIRA

View raw message