[AMBARI-18813] Optionally force username from LDAP authentication data to be lowercase in Ambari

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.4.0
• Fix Version/s: 2.5.0, 2.4.3
• Component/s: ambari-server
• Labels: ldap
• Assignee: Robert Levas
• Reporter: Robert Levas
• Created: 07/Nov/16 20:45
• Updated: 18/Apr/17 13:53
• Resolved: 18/Apr/17 13:53

Description

Optionally force username from LDAP authentication data to be lowercase in Ambari based on LDAP import configuration.

In some cases the username declared in the relevant LDAP object is in all uppercase characters when the local Hadoop cluster expects the username to be all lowercase. As of Ambari 2.4.0, the username specified from the LDAP data is used to override the username known to Ambari. This overwritten data may be in all uppercase characters, potentially breaking local username conventions.

To help this scenario, provide a configuration option to force the username obtained from the LDAP object to be converted to all lowercase character.

For example authentication.ldap.username.forceLowercase.

This optional configuration value is to default to false to maintain current functionality.

Issue Links

• links to: ReviewBoard