[HIVE-9880] Support configurable username attribute for HiveServer2 LDAP authentication

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 0.13.0
• Fix Version/s: 1.3.0, 2.0.0
• Component/s: HiveServer2
• Hadoop Flags: Reviewed
• Assignee: Naveen Gangam
• Reporter: Jaime Murillo
• Created: 06/Mar/15 00:18
• Updated: 16/Feb/16 23:52
• Resolved: 06/Oct/15 19:20

Description

OpenLDAP requires that when bind authenticating, the DN being supplied must be the creation DN of the account. Since, OpenLDAP allows for any attribute to be used when creating a DN for an account, organizations that don’t use hardcoded uid attribute won’t be able to utilize HiveServer2 LDAP authentication.

HiveServer2 should support a configurable username attribute when constructing the bindDN

Issue Links

• Is contained by: HIVE-7193 Hive should support additional LDAP authentication parameters