[SPARK-34134] LDAP authentication of spark thrift server support user id mapping

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 3.0.1
• Component/s: Security
• Assignee: Unassigned
• Reporter: Timothy Zhang
• Created: 16/Jan/21 07:31
• Updated: 05/Feb/21 17:45

Description

I'm trying to configure LDAP authentication of spark thrift server, and would like to implement user id mapping to mail address.

My scenario is, "uid" is the key of our LDAP system, and "mail"(email address) is one of attributes. Now we want users to input email address, i.e. "mail" when they login thrift client. That is to map "username" input to mail attribute query. e.g.

hive.server2.authentication.ldap.customLDAPQuery="(&(objectClass=person)(mail=${uid}))"