[
https://issues.apache.org/jira/browse/AMBARI-10513?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14504225#comment-14504225
]
Hudson commented on AMBARI-10513:
---------------------------------
FAILURE: Integrated in Ambari-trunk-Commit #2381 (See
[https://builds.apache.org/job/Ambari-trunk-Commit/2381/])
AMBARI-10513. ambari-server sync-ldap fails if there are too many users in the
LDAP server (more than 1000?) (Emil Anca via rlevas) (rlevas:
http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=eeea2eebec7d77ce4cea242b456c44f10610b331)
*
ambari-server/src/main/java/org/apache/ambari/server/security/ldap/AmbariLdapDataPopulator.java
*
ambari-server/src/test/java/org/apache/ambari/server/security/ldap/AmbariLdapDataPopulatorTest.java
> ambari-server sync-ldap fails if there are too many users in the LDAP server
> (more than 1000?)
> ----------------------------------------------------------------------------------------------
>
> Key: AMBARI-10513
> URL: https://issues.apache.org/jira/browse/AMBARI-10513
> Project: Ambari
> Issue Type: Bug
> Components: ambari-server
> Affects Versions: 2.0.0
> Reporter: Emil Anca
> Assignee: Emil Anca
> Fix For: 2.1.0
>
> Attachments: AMBARI-10513_01.patch
>
>
> ambari-server setup-ldap was performed against QE AD server, which has more
> than 2000 users.
> {code}[root@c6401 ~]# ambari-server sync-ldap --all
> Using python /usr/bin/python2.6
> Syncing with LDAP...
> Enter Ambari Admin login: admin
> Enter Ambari Admin password:
> Syncing all.......ERROR: Exiting with exit code 1.
> REASON: Caught exception running LDAP sync. [LDAP: error code 4 - Sizelimit
> Exceeded]; nested exception is javax.naming.SizeLimitExceededException:
> [LDAP: error code 4 - Sizelimit Exceeded]; remaining name
> 'CN=Users,DC=scl42,DC=hortonworks,DC=com'
> {code}
> Dilli Arumugam told me that Ranger (formerly known as XASecure) also hit a
> similar issue
> Problem: If your directory contains > 1000 users, attempts to sync-ldap users
> and groups to Ambari will fail. There is a limit of 1000 to the number of
> entities Ambari can process.
> Solution: Perform the sync-ldap using the --users and --groups option to
> limit the amount of entities to be under 1000 and perform the sync in batches.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
