From c518585a0c0dc86cee439b28a3146bf2b0029bd2 Mon Sep 17 00:00:00 2001
From: "peng.jianhua" <peng.jianhua@zte.com.cn>
Date: Thu, 19 Oct 2017 18:40:23 +0800
Subject: [PATCH 1/1] KYLIN-2949: The kylin does not get right authorities when
 the LDAP authentication service was used in RedHat OS.

---
 .../main/java/org/apache/kylin/rest/security/AuthoritiesPopulator.java   | 1 +
 1 file changed, 1 insertion(+)

diff --git a/server-base/src/main/java/org/apache/kylin/rest/security/AuthoritiesPopulator.java b/server-base/src/main/java/org/apache/kylin/rest/security/AuthoritiesPopulator.java
index 592791cdf..2b9d8c959 100644
--- a/server-base/src/main/java/org/apache/kylin/rest/security/AuthoritiesPopulator.java
+++ b/server-base/src/main/java/org/apache/kylin/rest/security/AuthoritiesPopulator.java
@@ -63,6 +63,7 @@ public class AuthoritiesPopulator extends DefaultLdapAuthoritiesPopulator {
 
     @Override
     public Set<GrantedAuthority> getGroupMembershipRoles(String userDn, String username) {
+        setGroupSearchFilter("(|(member={0})(memberUid={1}))");
         Set<GrantedAuthority> authorities = super.getGroupMembershipRoles(userDn, username);
 
         Set<GrantedAuthority> userAuthorities = new HashSet<GrantedAuthority>();
-- 
2.13.0.windows.1