[ZEPPELIN-5424] LdapRealm does not fetch more than $pagingSize Groups

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.9.0
• Fix Version/s: 0.9.1
• Component/s: zeppelin-server
• Assignee: Unassigned
• Reporter: Johannes Schillinger
• Created: 23/Jun/21 08:51
• Updated: 21/Jul/21 02:59
• Resolved: 21/Jul/21 02:59

Description

LdapRealm does not utilize the Cookie from the LDAP Server to continue fetching paged results of the search.

Therefore the Result Size is limited by ldapRealm.pagingSize (defaults to 100)

This will lead to very unpredictable behaviour, e.g. if the results get sorted differently for every search and can therefore be different for every search result.

Cause of this behaviour is in LdapRealm.rolesFor:

 

dapCtx.setRequestControls(new Control[]{new PagedResultsControl(pageSize,null, Control.CRITICAL)});

The Cookie needs to be refreshed on every Call to the LDAP Server