Details
-
Improvement
-
Status: Open
-
Major
-
Resolution: Unresolved
-
None
-
None
-
None
Description
LDAP servers can be configured with search limits, which would cause the LdapGroupsMapping class to throw an exception if it returned more results than the search limit allowed. If a user belonged to a very large number of groups, or the search limit was set to a fairly low number, this could result in some undesirable behavior.
The LdapGroupsMapping should be augmented to page results, if necessary.
Attachments
Issue Links
- relates to
-
HADOOP-8121 Active Directory Group Mapping Service
- Closed