[HIVE-21009] LDAP - Specify binddn for ldap-search

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.1.0, 2.1.1, 2.2.0, 2.3.0, 2.3.1, 2.3.2
• Fix Version/s: 4.0.0-alpha-1
• Component/s: HiveServer2
• Labels: features newbie security
• Target Version/s: 4.0.0

Release Note

Adds the following configuration properties for plain LDAP authentication to use a specified bind user to connect to the server:

hive.server2.authentication.ldap.binddn - Fully qualified name of the bind user you want to use.
hive.server2.authentication.ldap.bindpw - The password for the bind user specified in the parameter above. This may be contained in the configuration parameters directly, or inside of a jceks file.

• Assignee: David McGinnis
• Reporter: Thomas Uhren
• Created: 05/Dec/18 14:50
• Updated: 17/Nov/22 08:54
• Resolved: 06/Feb/19 22:57

Description

When user accounts cannot do an LDAP search, there is currently no way of specifying a custom binddn to use for the ldap-search.

So I'm missing something like that:

hive.server2.authentication.ldap.bindn=cn=ldapuser,ou=user,dc=example
hive.server2.authentication.ldap.bindnpw=password