ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Sailaja Polavarapu (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (RANGER-1211) Improve Ranger Usersync to sync AD/LDAP users and/or groups incrementally.
Date Thu, 29 Dec 2016 18:03:58 GMT

    [ https://issues.apache.org/jira/browse/RANGER-1211?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15785778#comment-15785778
] 

Sailaja Polavarapu commented on RANGER-1211:
--------------------------------------------

[~aloklal99] Not sure if I understood the question completely. Do you mean that we should
perform full sync periodically like every few days in addition to the configured time interval
for delta sync?
With the current design, during startup of usersync, we perform full sync. And since we are
not maintaining/building cache with users, groups, and their mappings in usersync, the startup
time is also very less. So in worst case usersync can be restarted in order to force a full
sync.
Also, there is an apache jira (https://issues.apache.org/jira/browse/RANGER-1221) for an API
to perform force full sync which I am thinking might be a better option for customers instead
of restarting usersync.



>  Improve Ranger Usersync to sync AD/LDAP users and/or groups incrementally.
> ---------------------------------------------------------------------------
>
>                 Key: RANGER-1211
>                 URL: https://issues.apache.org/jira/browse/RANGER-1211
>             Project: Ranger
>          Issue Type: Improvement
>          Components: usersync
>    Affects Versions: 0.6.1, 0.6.2
>            Reporter: Sailaja Polavarapu
>            Assignee: Sailaja Polavarapu
>              Labels: ranger
>             Fix For: 0.7.0
>
>         Attachments: 0001-RANGER-1211-Support-incremental-Delta-Sync-with-AD-L.patch,
DeltaSyncsupportforRangerUsersync.docx
>
>
> During every sync cycle, Ranger Usersync performs full LDAP/AD sync and computes the
delta in-memory and updates ranger admin. Since usersync computes the delta (including group
memberships) of all the users that are sync’d in memory for every sync cycle, UserSync can
take a lot of resources on the server it is running on. 
> Enhance usersync to perform full sync only during startup and incremental or delta sync
for the subsequent sync cycles. This way the delta computation of group memberships can be
highly reduced and can increase usersync performance. 



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message