[KNOX-508] knox to uptake Apache DS 2.0.0-M16 or later

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.4.0
• Fix Version/s: 0.10.0
• Component/s: Server
• Assignee: Kevin Risden
• Reporter: Dilli Arumugam
• Created: 20/Feb/15 05:48
• Updated: 28/Mar/19 14:17
• Resolved: 02/Oct/16 18:39

Description

Apache Ranger pointing to ApacheDS bundled with Knox is hitting ApacheDS bug
https://issues.apache.org/jira/browse/DIRSERVER-1917
This seems to be fixed in Apache DS 2.0.0-M16.
Hence, requesting Knox to uptake Apache DS 2.0.0-M16 or later

Exception stack trace in Apache Ranger logs when it hits the ApacheDS bug:
javax.naming.NamingException: [LDAP: error code 80 - OTHER: failed for MessageType : SEARCH_REQUEST
Message ID : 2
SearchRequest
baseDn : 'ou=people,dc=hadoop,dc=apache,dc=org'
filter : '(objectclass=person)'
scope : whole subtree
typesOnly : false
Size Limit : no limit
Time Limit : no limit
Deref Aliases : deref Always
attributes : 'uid', 'ismemberof', 'memberof'
org.apache.directory.api.ldap.model.message.SearchRequestImpl@7c51bb2 OpaqueControl Control
Type OID : '1.2.840.113556.1.4.319'
Criticality : 'false'
'
: org.apache.directory.api.ldap.codec.BasicControlDecorator cannot be cast to org.apache.directory.api.ldap.codec.controls.search.pagedSearch.PagedResultsDecorator]; remaining name 'ou=people,dc=hadoop,dc=apache,dc=org'
at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3131)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:3033)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2840)
at com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1849)
at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1772)
at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(ComponentDirContext.java:386)
at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:356)
at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:339)
at javax.naming.directory.InitialDirContext.search(InitialDirContext.java:267)
at com.xasecure.ldapusersync.process.LdapUserGroupBuilder.updateSink(LdapUserGroupBuilder.java:195)
at com.xasecure.usergroupsync.UserGroupSync.run(UserGroupSync.java:59)
at java.lang.Thread.run(Thread.java:745)

Issue Links

• relates to: KNOX-644 Limit/page results of LDAP group membership search