准备环境
搭建LDAP参考:https://blog.csdn.net/Happy_Sunshine_Boy/article/details/102806684
搭建好ldap服务之后,查看slapd服务端口
LDAP配置
配置参考:https://blog.csdn.net/Happy_Sunshine_Boy/article/details/102895967
Ranger配置
-- COMMON CONFIGS:
Sync Source:LDAP/AD # 同步用户源
ranger.usersync.source.impl.class=org.apache.ranger.ldapusersync.process.LdapUserGroupBuilder
ranger.usersync.ldap.url=ldap://workerhd.bigdata:389 -- COMMON CONFIGS: LDAP/AD URL
ranger.usersync.ldap.binddn=cn=admin,dc=yaobili,dc=com -- COMMON CONFIGS:Bind User
ranger.usersync.ldap.bindpassword=123456 -- COMMON CONFIGS:Bind User Password
ranger.usersync.ldap.deltasync=false -- COMMON CONFIGS:Incremental Sync # 增量同步
ranger.usersync.ldap.starttls=false -- COMMON CONFIGS:Enable LDAP STARTTLS # 开启安全服务
-- USER CONFIGS
ranger.usersync.ldap.user.nameattribute=uid -- USER CONFIGS:Username Attribute # 用户名属性
ranger.usersync.ldap.user.objectclass=person -- USER CONFIGS:User Object Class # 用户对象嘞
ranger.usersync.ldap.user.searchbase=dc=yaobili,dc=com -- USER CONFIGS:User Search Base # 用户搜索基地
ranger.usersync.ldap.user.searchfilter=(member=cn=ranger,cn=groups,cn=compat,dc=yaobili,dc=com)
-- USER CONFIGS:User Search Filter # 用户搜索过滤器
ranger.usersync.ldap.user.searchscope=sub -- USER CONFIGS:User Search Scope # 用户搜索范围
ranger.usersync.ldap.user.groupnameattribute=member -- USER CONFIGS:User Group Name Attribute # 用户组名属性
ranger.usersync.group.usermapsyncenabled=true -- USER CONFIGS:Group User Map Sync # 组用户映射同步
ranger.usersync.user.searchenabled=false -- USER CONFIGS:Enable User Search # 让用户搜索
-- GROUP CONFIGS
ranger.usersync.group.searchenabled=true -- GROUP CONFIGS:Enable Group Sync # 开启组同步
ranger.usersync.group.memberattributename=member -- GROUP CONFIGS:Group Member Attribute # 小组成员属性
ranger.usersync.group.nameattribute=cn -- GROUP CONFIGS:Group Name Attribute # 用户组名属性
ranger.usersync.group.objectclass=posixGroup -- GROUP CONFIGS:Group Object Class # 用户组对象类
ranger.usersync.group.searchbase=cn=groups,cn=accounts,dc=yaobili,dc=com
-- GROUP CONFIGS:Group Search Base # 组搜索基地
ranger.usersync.group.searchfilter=(cn=ranger) -- GROUP CONFIGS:Group Search Filter # 组搜索过滤器
ranger.usersync.group.search.first.enabled=true -- GROUP CONFIGS:Enable Group Search First # 首先启用组搜索
Ranger同步LDAP用户