Uploaded image for project: 'Hive'
  1. Hive
  2. HIVE-21363

Ldap auth issue: group filter match should be case insensitive

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 3.0.0
    • Fix Version/s: 3.2.0, 4.0.0
    • Component/s: HiveServer2
    • Labels:
      None

      Description

      Configure HiveServer2 with LDAP auth with (enable ldap, ldap URI, baseDN, userDNPattern, groupDNPattern and groupFilter).

      If the specified groupFilter case is different than the actual one in directory, then Hive cannot find a match and errors out.

      For example:
      groupFilter value=<groupTest>
      group name in directory server=grouptest.

      Similar search works by using other ldap clients like ldapsearch (ldap searches are case insensitive).
      While it is not a major issue as the workaround would be to configure the exact name, it is an easy fix that we should support out of box.

        Attachments

        1. HIVE-21363.patch
          3 kB
          Naveen Gangam

          Activity

            People

            • Assignee:
              ngangam Naveen Gangam
              Reporter:
              ngangam Naveen Gangam
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: