[HADOOP-12001] Limiting LDAP search conflicts with posixGroup addition

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 2.7.0, 2.8.0
• Fix Version/s: 2.8.0, 3.0.0-alpha1, 2.7.6
• Component/s: security
• Target Version/s: 2.7.6
• Hadoop Flags: Reviewed
• Assignee: Patrick White
• Reporter: Patrick White
• Created: 19/May/15 22:37
• Updated: 07/Mar/18 02:36
• Resolved: 15/Jun/15 21:31

Description

In HADOOP-9477, posixGroup support was added
In HADOOP-10626, a limit on the returned attributes was added to speed up queries.

Limiting the attributes can break the SEARCH_CONTROLS object in the context of the isPosix block, since it only asks LDAP for the groupNameAttr

Issue Links

• breaks: HADOOP-9477 Add posixGroups support for LDAP groups mapping service