Skip to content

RANGER-5698 : Disable Unix Authentication Service by default - #1171

Open
fimugdha wants to merge 1 commit into
apache:masterfrom
fimugdha:RANGER-5698
Open

RANGER-5698 : Disable Unix Authentication Service by default#1171
fimugdha wants to merge 1 commit into
apache:masterfrom
fimugdha:RANGER-5698

Conversation

@fimugdha

Copy link
Copy Markdown
Contributor

What changes were proposed in this pull request?

The Unix Authentication service is rarely utilized for Ranger authentication, as the vast majority of deployments have migrated to modern alternatives like PAM or LDAP.

To optimize default startup behavior, we are removing the Unix Authentication service from the Ranger Usersync default startup sequence.

Moving forward, this service will run only if explicitly enabled via the ranger.usersync.unix.auth.enabled property within the ranger-ugsync-site.xml configuration file.

How was this patch tested?

  1. Brought up ranger core services: ranger, usersync, tagsync, pdp and kms in containers.
  2. Created a user on ranger & usersync containers.
  3. Set the password for the user.
  4. User got synced successfully on Ranger Admin.
  5. Login was successfully with the user password on Ranger Admin with PAM authentication.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant