[HADOOP-10656] The password keystore file is not picked by LDAP group mapping

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.2.0
• Fix Version/s: 2.5.0
• Component/s: security
• Hadoop Flags: Reviewed
• Assignee: Brandon Li
• Reporter: Brandon Li
• Created: 02/Jun/14 23:37
• Updated: 15/Aug/14 05:39
• Resolved: 11/Jun/14 18:59

Description

The user configured password file(LDAP_KEYSTORE_PASSWORD_FILE_KEY) will not be picked by LdapGroupsMapping:

In setConf():

    keystorePass =
        conf.get(LDAP_KEYSTORE_PASSWORD_KEY, LDAP_KEYSTORE_PASSWORD_DEFAULT);
    if (keystorePass.isEmpty()) {
      keystorePass = extractPassword(
        conf.get(LDAP_KEYSTORE_PASSWORD_KEY, LDAP_KEYSTORE_PASSWORD_DEFAULT)); 
    }

Issue Links

• relates to: HADOOP-8121 Active Directory Group Mapping Service