ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Tom Beerbower" <tbeerbo...@hortonworks.com>
Subject Review Request 31352: Provide setup-ldap option option to set referral method
Date Tue, 24 Feb 2015 11:30:18 GMT

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/31352/
-----------------------------------------------------------

Review request for Ambari, Jonathan Hurley and Nate Cole.


Bugs: AMBARI-9767
    https://issues.apache.org/jira/browse/AMBARI-9767


Repository: ambari


Description
-------

ambari-server sync-ldap fails with certain AD setups. Need to follow referrals.

    [root@revo1 hdfs]# ambari-server sync-ldap --all
    Using python  /usr/bin/python2.6
    Syncing with LDAP...
    Enter Ambari Admin login: admin
    Enter Ambari Admin password: 
    Syncing all...ERROR: Exiting with exit code 1. 
    REASON: Caught exception running LDAP sync. Unprocessed Continuation Reference(s); nested
exception is javax.naming.PartialResultException: Unprocessed Continuation Reference(s); remaining
name 'dc=...'

To fix this:
1) Have sync-ldap follow referrals by default
2) expose a step in setup-ldap to set the referral method (follow or ignore)


Diffs
-----

  ambari-server/src/main/java/org/apache/ambari/server/configuration/Configuration.java d859523

  ambari-server/src/main/java/org/apache/ambari/server/security/authorization/LdapServerProperties.java
ddb3670 
  ambari-server/src/main/java/org/apache/ambari/server/security/ldap/AmbariLdapDataPopulator.java
05494e3 
  ambari-server/src/main/python/ambari_server/setupSecurity.py 71b246d 
  ambari-server/src/test/java/org/apache/ambari/server/security/ldap/AmbariLdapDataPopulatorTest.java
ea5570e 

Diff: https://reviews.apache.org/r/31352/diff/


Testing
-------

Manual testing and new unit test.


Thanks,

Tom Beerbower


Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message