[HADOOP-10249] LdapGroupsMapping should trim ldap password read from file

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.2.0
• Fix Version/s: 2.4.0
• Hadoop Flags: Reviewed
• Assignee: Dilli Arumugam
• Reporter: Dilli Arumugam
• Created: 21/Jan/14 20:14
• Updated: 10/Apr/14 13:11
• Resolved: 13/Feb/14 23:48

Description

org.apache.hadoop.security.LdapGroupsMapping allows specifying ldap connection password in a file using property key

hadoop.security.group.mapping.ldap.bind.password.file

The code in LdapGroupsMapping that reads the content of the password file does not trim the password value. This causes ldap connection failure as the password in the password file ends up having a trailing newline.

Most of the text editors and echo adds a new line at the end of file.
So, LdapGroupsMapping should trim the password read from the file.