[IMPALA-10822] Allow multiple group returns for LDAP search bind authentication group search

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: Impala 4.1.0
• Component/s: Backend, Security
• Epic Color: ghx-label-14
• Assignee: Tamas Mate
• Reporter: Tamas Mate
• Created: 23/Jul/21 08:04
• Updated: 11/Jan/22 13:39
• Resolved: 11/Jan/22 13:39

Description

Group search uses the same LdapSearch method that the user which has a condition that only one result should be returned, otherwise the authentication is ambiguous. However, this condition is too restrictive for group searches and multiple search results should be allowed.