[HADOOP-8170] LdapGroupsMapping should support a configurable search limit

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: security
• Assignee: Unassigned
• Reporter: Jonathan Natkins
• Created: 14/Mar/12 17:01
• Updated: 20/Mar/12 01:47

Description

LDAP servers can be configured with search limits, which would cause the LdapGroupsMapping class to throw an exception if it returned more results than the search limit allowed. If a user belonged to a very large number of groups, or the search limit was set to a fairly low number, this could result in some undesirable behavior.

The LdapGroupsMapping should be augmented to page results, if necessary.

Issue Links

• relates to: HADOOP-8121 Active Directory Group Mapping Service