[HADOOP-15255] Upper/Lower case conversion support for group names in LdapGroupsMapping - ASF JIRA

Voters

Watch issue

Watchers

Create sub-task

Link

Clone

Update Comment Author

Replace String in Comment

Update Comment Visibility

Delete Comments

XML

Word

Printable

JSON

Details

Type: Improvement
Status: Resolved
Priority: Major
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 3.1.0
Component/s: None
Labels:
None

Hadoop Flags:

Reviewed

Description

On most LDAP servers the user and group names are case-insensitive. When we use JniBasedUnixGroupsMappingWithFallback and have SSSD in place, it is possible to configure SSSD to force the group names to be returned in lowercase. If we use LdapGroupsMapping, we don't have any such option.

This jira proposes to introduce a new hadoop.security.group.mapping implementation based on LdapGroupsMapping which supports force lower/upper case group names.