ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hudson (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (AMBARI-10513) ambari-server sync-ldap fails if there are too many users in the LDAP server (more than 1000?)
Date Tue, 21 Apr 2015 03:25:59 GMT

    [ https://issues.apache.org/jira/browse/AMBARI-10513?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14504225#comment-14504225
] 

Hudson commented on AMBARI-10513:
---------------------------------

FAILURE: Integrated in Ambari-trunk-Commit #2381 (See [https://builds.apache.org/job/Ambari-trunk-Commit/2381/])
AMBARI-10513. ambari-server sync-ldap fails if there are too many users in the LDAP server
(more than 1000?) (Emil Anca via rlevas) (rlevas: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=eeea2eebec7d77ce4cea242b456c44f10610b331)
* ambari-server/src/main/java/org/apache/ambari/server/security/ldap/AmbariLdapDataPopulator.java
* ambari-server/src/test/java/org/apache/ambari/server/security/ldap/AmbariLdapDataPopulatorTest.java


> ambari-server sync-ldap fails if there are too many users in the LDAP server (more than
1000?)
> ----------------------------------------------------------------------------------------------
>
>                 Key: AMBARI-10513
>                 URL: https://issues.apache.org/jira/browse/AMBARI-10513
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-server
>    Affects Versions: 2.0.0
>            Reporter: Emil Anca
>            Assignee: Emil Anca
>             Fix For: 2.1.0
>
>         Attachments: AMBARI-10513_01.patch
>
>
> ambari-server setup-ldap was performed against QE AD server, which has more than 2000
users.
> {code}[root@c6401 ~]# ambari-server sync-ldap --all
> Using python  /usr/bin/python2.6
> Syncing with LDAP...
> Enter Ambari Admin login: admin
> Enter Ambari Admin password:
> Syncing all.......ERROR: Exiting with exit code 1.
> REASON: Caught exception running LDAP sync. [LDAP: error code 4 - Sizelimit Exceeded];
nested exception is javax.naming.SizeLimitExceededException: [LDAP: error code 4 - Sizelimit
Exceeded]; remaining name 'CN=Users,DC=scl42,DC=hortonworks,DC=com'
> {code}
> Dilli Arumugam told me that Ranger (formerly known as XASecure) also hit a similar issue
> Problem: If your directory contains > 1000 users, attempts to sync-ldap users and
groups to Ambari will fail. There is a limit of 1000 to the number of entities Ambari can
process.
> Solution: Perform the sync-ldap using the --users and --groups option to limit the amount
of entities to be under 1000 and perform the sync in batches.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message