[ZEPPELIN-2796] LDAP fetching of roles not working?

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.8.0
• Assignee: Herval Freire
• Reporter: Herval Freire
• Created: 18/Jul/17 19:55
• Updated: 01/Oct/17 18:49
• Resolved: 01/Oct/17 18:49

Description

I tried setting up LDAP support. While authentication works, I couldn't get any roles lists back. This led me down SHIRO-492 and the code on `SecurityUtils`, which uses a `getListRoles()` function that simply returns a list you can configure on shiro.ini ("rolesByGroup") - so no LDAP call is actually made.

I could get it to work by using the (currently protected) `queryForAuthorizationInfo`, so my question here is if there's any historical reason not to use that to fetch user's roles?

Issue Links

• links to: GitHub Pull Request #2498