[HADOOP-15995] Add ldap.bind.password.alias in LdapGroupsMapping to distinguish aliases when using multiple providers through CompositeGroupsMapping

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.3.0
• Component/s: common
• Assignee: Lukas Majercak
• Reporter: Lukas Majercak
• Created: 10/Dec/18 20:45
• Updated: 12/Dec/18 19:27
• Resolved: 12/Dec/18 19:11

Description

Currently, the property name hadoop.security.group.mapping.ldap.bind.password is used as an alias to get password from CredentialProviders. This has a big issue, which is that when we configure multiple LdapGroupsMapping providers through CompositeGroupsMapping, they will all have the same alias, and won't be able to be distinguished.