hadoop-common-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Pierre Sauvage (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (HADOOP-13984) Cannot force uppercase through auth_to_local
Date Fri, 13 Jan 2017 10:29:26 GMT

     [ https://issues.apache.org/jira/browse/HADOOP-13984?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Pierre Sauvage updated HADOOP-13984:
------------------------------------
    Description: 
It is possible, with /L, to force lowercase in auth_to_local mapping process (e.g. LOWER@HADOOP.DOMAIN
-> lower).
But the opposite, using /U, is not possible
(e.g upper@HADOOP.DOMAIN -> UPPER)
The ability of forcing uppercase is important when using Active Directory with cross-realm
trust since Active Directory is case insensitive (you can both kinit foobar@AD.DOMAIN.COM
and FOOBAR@AD.DOMAIN.COM).

  was:
It is possible, with /L, to force lowercase in auth_to_local mapping process (e.g. LOWER@HADOOP.DOMAIN
-> lower).
But the opposite, using /U, is not possible
(e.g upper@HADOOP.DOMAIN -> UPPER)



> Cannot force uppercase through auth_to_local
> --------------------------------------------
>
>                 Key: HADOOP-13984
>                 URL: https://issues.apache.org/jira/browse/HADOOP-13984
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: security
>            Reporter: Pierre Sauvage
>
> It is possible, with /L, to force lowercase in auth_to_local mapping process (e.g. LOWER@HADOOP.DOMAIN
-> lower).
> But the opposite, using /U, is not possible
> (e.g upper@HADOOP.DOMAIN -> UPPER)
> The ability of forcing uppercase is important when using Active Directory with cross-realm
trust since Active Directory is case insensitive (you can both kinit foobar@AD.DOMAIN.COM
and FOOBAR@AD.DOMAIN.COM).



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org


Mime
View raw message