[HIVE-21363] Ldap auth issue: group filter match should be case insensitive

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 3.0.0
• Fix Version/s: 3.2.0, 4.0.0-alpha-1
• Component/s: HiveServer2
• Assignee: Naveen Gangam
• Reporter: Naveen Gangam
• Created: 28/Feb/19 21:29
• Updated: 17/Nov/22 08:50
• Resolved: 01/Mar/19 20:18

Description

Configure HiveServer2 with LDAP auth with (enable ldap, ldap URI, baseDN, userDNPattern, groupDNPattern and groupFilter).

If the specified groupFilter case is different than the actual one in directory, then Hive cannot find a match and errors out.

For example:
groupFilter value=<groupTest>
group name in directory server=grouptest.

Similar search works by using other ldap clients like ldapsearch (ldap searches are case insensitive).
While it is not a major issue as the workaround would be to configure the exact name, it is an easy fix that we should support out of box.