[HIVE-12007] Hive LDAP Authenticator should allow just Domain without baseDN (for AD)

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.1.0
• Fix Version/s: 1.3.0, 2.0.0
• Component/s: HiveServer2
• Assignee: Naveen Gangam
• Reporter: Naveen Gangam
• Created: 01/Oct/15 18:42
• Updated: 16/Feb/16 23:50
• Resolved: 05/Oct/15 17:14

Description

When the baseDN is not configured but only the Domain has been set in hive-site.xml, LDAP Atn provider cannot locate the user in the directory. Authentication fails in such cases. This is a change from the prior implementation where the auth request succeeds based on being able to bind to the directory. This has been called out in the design doc in HIVE-7193.

But we should allow this for now for backward compatibility.

Issue Links

• is broken by: HIVE-7193 Hive should support additional LDAP authentication parameters