Uploaded image for project: 'Ambari'
  1. Ambari
  2. AMBARI-18813

Optionally force username from LDAP authentication data to be lowercase in Ambari

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 2.4.0
    • Fix Version/s: 2.5.0, 2.4.3
    • Component/s: ambari-server
    • Labels:

      Description

      Optionally force username from LDAP authentication data to be lowercase in Ambari based on LDAP import configuration.

      In some cases the username declared in the relevant LDAP object is in all uppercase characters when the local Hadoop cluster expects the username to be all lowercase. As of Ambari 2.4.0, the username specified from the LDAP data is used to override the username known to Ambari. This overwritten data may be in all uppercase characters, potentially breaking local username conventions.

      To help this scenario, provide a configuration option to force the username obtained from the LDAP object to be converted to all lowercase character.

      For example authentication.ldap.username.forceLowercase.

      This optional configuration value is to default to false to maintain current functionality.

      1. AMBARI-18813_branch-2.5_01.patch
        10 kB
        Robert Levas
      2. AMBARI-18813_trunk_01.patch
        10 kB
        Robert Levas
      3. AMBARI-18813_branch-2.4_01.patch
        9 kB
        Robert Levas

        Issue Links

          Activity

          Hide
          rlevas Robert Levas added a comment -

          Committed to branch-2.4

          commit 34f0103f6d50d27fbeb1482e86a03daee7cff795
          Author: Robert Levas <rlevas@hortonworks.com>
          Date:   Tue Apr 18 09:52:46 2017 -0400
          
          Show
          rlevas Robert Levas added a comment - Committed to branch-2.4 commit 34f0103f6d50d27fbeb1482e86a03daee7cff795 Author: Robert Levas <rlevas@hortonworks.com> Date: Tue Apr 18 09:52:46 2017 -0400
          Hide
          rlevas Robert Levas added a comment -

          Reopening to apply patch to Ambari 2.4.3.

          Show
          rlevas Robert Levas added a comment - Reopening to apply patch to Ambari 2.4.3.
          Hide
          hudson Hudson added a comment -

          SUCCESS: Integrated in Jenkins build Ambari-branch-2.5 #291 (See https://builds.apache.org/job/Ambari-branch-2.5/291/)
          AMBARI-18813. Optionally force username from LDAP authentication data to (rlevas: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=25c6da026696f62554afb9a83d4e0b4f5e14fca3)

          • (edit) ambari-server/src/main/java/org/apache/ambari/server/security/authorization/AmbariLdapBindAuthenticator.java
          • (edit) ambari-server/src/main/java/org/apache/ambari/server/configuration/Configuration.java
          • (edit) ambari-server/docs/configuration/index.md
          • (edit) ambari-server/src/main/java/org/apache/ambari/server/security/authorization/LdapServerProperties.java
          • (edit) ambari-server/src/test/java/org/apache/ambari/server/security/authorization/AmbariLdapBindAuthenticatorTest.java
          Show
          hudson Hudson added a comment - SUCCESS: Integrated in Jenkins build Ambari-branch-2.5 #291 (See https://builds.apache.org/job/Ambari-branch-2.5/291/ ) AMBARI-18813 . Optionally force username from LDAP authentication data to (rlevas: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=25c6da026696f62554afb9a83d4e0b4f5e14fca3 ) (edit) ambari-server/src/main/java/org/apache/ambari/server/security/authorization/AmbariLdapBindAuthenticator.java (edit) ambari-server/src/main/java/org/apache/ambari/server/configuration/Configuration.java (edit) ambari-server/docs/configuration/index.md (edit) ambari-server/src/main/java/org/apache/ambari/server/security/authorization/LdapServerProperties.java (edit) ambari-server/src/test/java/org/apache/ambari/server/security/authorization/AmbariLdapBindAuthenticatorTest.java
          Hide
          hudson Hudson added a comment -

          SUCCESS: Integrated in Jenkins build Ambari-trunk-Commit #5972 (See https://builds.apache.org/job/Ambari-trunk-Commit/5972/)
          AMBARI-18813. Optionally force username from LDAP authentication data to (rlevas: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=3bf40d0d4693ece985cbe050c3027e9272998c7c)

          • (edit) ambari-server/src/main/java/org/apache/ambari/server/configuration/Configuration.java
          • (edit) ambari-server/docs/configuration/index.md
          • (edit) ambari-server/src/test/java/org/apache/ambari/server/security/authorization/AmbariLdapBindAuthenticatorTest.java
          • (edit) ambari-server/src/main/java/org/apache/ambari/server/security/authorization/LdapServerProperties.java
          • (edit) ambari-server/src/main/java/org/apache/ambari/server/security/authorization/AmbariLdapBindAuthenticator.java
          Show
          hudson Hudson added a comment - SUCCESS: Integrated in Jenkins build Ambari-trunk-Commit #5972 (See https://builds.apache.org/job/Ambari-trunk-Commit/5972/ ) AMBARI-18813 . Optionally force username from LDAP authentication data to (rlevas: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=3bf40d0d4693ece985cbe050c3027e9272998c7c ) (edit) ambari-server/src/main/java/org/apache/ambari/server/configuration/Configuration.java (edit) ambari-server/docs/configuration/index.md (edit) ambari-server/src/test/java/org/apache/ambari/server/security/authorization/AmbariLdapBindAuthenticatorTest.java (edit) ambari-server/src/main/java/org/apache/ambari/server/security/authorization/LdapServerProperties.java (edit) ambari-server/src/main/java/org/apache/ambari/server/security/authorization/AmbariLdapBindAuthenticator.java
          Hide
          rlevas Robert Levas added a comment -

          Committed to trunk

          commit 3bf40d0d4693ece985cbe050c3027e9272998c7c
          Author: Robert Levas <rlevas@hortonworks.com>
          Date:   Wed Nov 9 15:00:16 2016 -0500
          

          Committed to branch-2.5

          commit 25c6da026696f62554afb9a83d4e0b4f5e14fca3
          Author: Robert Levas <rlevas@hortonworks.com>
          Date:   Wed Nov 9 15:01:21 2016 -0500
          
          Show
          rlevas Robert Levas added a comment - Committed to trunk commit 3bf40d0d4693ece985cbe050c3027e9272998c7c Author: Robert Levas <rlevas@hortonworks.com> Date: Wed Nov 9 15:00:16 2016 -0500 Committed to branch-2.5 commit 25c6da026696f62554afb9a83d4e0b4f5e14fca3 Author: Robert Levas <rlevas@hortonworks.com> Date: Wed Nov 9 15:01:21 2016 -0500
          Hide
          hadoopqa Hadoop QA added a comment -

          -1 overall. Here are the results of testing the latest attachment
          http://issues.apache.org/jira/secure/attachment/12838032/AMBARI-18813_trunk_01.patch
          against trunk revision .

          +1 @author. The patch does not contain any @author tags.

          +1 tests included. The patch appears to include 1 new or modified test files.

          +1 javac. The applied patch does not increase the total number of javac compiler warnings.

          +1 release audit. The applied patch does not increase the total number of release audit warnings.

          -1 core tests. The test build failed in ambari-server

          Test results: https://builds.apache.org/job/Ambari-trunk-test-patch/9180//testReport/
          Console output: https://builds.apache.org/job/Ambari-trunk-test-patch/9180//console

          This message is automatically generated.

          Show
          hadoopqa Hadoop QA added a comment - -1 overall . Here are the results of testing the latest attachment http://issues.apache.org/jira/secure/attachment/12838032/AMBARI-18813_trunk_01.patch against trunk revision . +1 @author . The patch does not contain any @author tags. +1 tests included . The patch appears to include 1 new or modified test files. +1 javac . The applied patch does not increase the total number of javac compiler warnings. +1 release audit . The applied patch does not increase the total number of release audit warnings. -1 core tests . The test build failed in ambari-server Test results: https://builds.apache.org/job/Ambari-trunk-test-patch/9180//testReport/ Console output: https://builds.apache.org/job/Ambari-trunk-test-patch/9180//console This message is automatically generated.

            People

            • Assignee:
              rlevas Robert Levas
              Reporter:
              rlevas Robert Levas
            • Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development