ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Erik Bergenholtz (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (AMBARI-10513) ambari-server sync-ldap fails if there are too many users in the LDAP server (more than 1000?)
Date Thu, 16 Apr 2015 17:59:58 GMT

     [ https://issues.apache.org/jira/browse/AMBARI-10513?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Erik Bergenholtz updated AMBARI-10513:
--------------------------------------
    Assignee: Emil Anca

> ambari-server sync-ldap fails if there are too many users in the LDAP server (more than
1000?)
> ----------------------------------------------------------------------------------------------
>
>                 Key: AMBARI-10513
>                 URL: https://issues.apache.org/jira/browse/AMBARI-10513
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-server
>    Affects Versions: 2.0.0
>            Reporter: Emil Anca
>            Assignee: Emil Anca
>             Fix For: 2.1.0
>
>
> ambari-server setup-ldap was performed against QE AD server, which has more than 2000
users.
> [root@c6401 ~]# ambari-server sync-ldap --all
> Using python  /usr/bin/python2.6
> Syncing with LDAP...
> Enter Ambari Admin login: admin
> Enter Ambari Admin password:
> Syncing all.......ERROR: Exiting with exit code 1.
> REASON: Caught exception running LDAP sync. [LDAP: error code 4 - Sizelimit Exceeded];
nested exception is javax.naming.SizeLimitExceededException: [LDAP: error code 4 - Sizelimit
Exceeded]; remaining name 'CN=Users,DC=scl42,DC=hortonworks,DC=com'
> Dilli Arumugam told me that Ranger (formerly known as XASecure) also hit a similar issue:
BUG-23578.
> BUG-31217: Attempting to sync LDAP that contains > 1000 entities fails.
> Problem: If your directory contains > 1000 users, attempts to sync-ldap users and
groups to Ambari will fail. There is a limit of 1000 to the number of entities Ambari can
process.
> Solution: Perform the sync-ldap using the --users and --groups option to limit the amount
of entities to be under 1000 and perform the sync in batches.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message