ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Sailaja Polavarapu (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (RANGER-1735) Support representing nested group memberships in Ranger Admin
Date Fri, 01 Sep 2017 01:58:00 GMT

     [ https://issues.apache.org/jira/browse/RANGER-1735?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Sailaja Polavarapu updated RANGER-1735:
---------------------------------------
    Attachment: 0001-RANGER-1735-Support-representing-nested-group-member.patch

Initial implementation of evaluating nested group memberships for ranger usersync.

> Support representing nested group memberships in Ranger Admin
> -------------------------------------------------------------
>
>                 Key: RANGER-1735
>                 URL: https://issues.apache.org/jira/browse/RANGER-1735
>             Project: Ranger
>          Issue Type: New Feature
>          Components: Ranger, usersync
>    Affects Versions: 0.7.1
>            Reporter: Sailaja Polavarapu
>            Assignee: Sailaja Polavarapu
>             Fix For: 1.0.0, 0.7.2
>
>         Attachments: 0001-RANGER-1735-Support-representing-nested-group-member.patch,
Ranger Usersync - Nested Group Support.docx
>
>
> Several large enterprises have their groups in LDAP/AD nested within other groups. Since
Ranger user sync currently only pulls in the immediate group, it is possible that some nested
memberships might not be available for policy authoring. Hadoop user-group mapping already
supports nested LDAP/AD groups for policy enforcement at the Ranger plugin. 



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message