hadoop-common-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Íñigo Goiri (JIRA) <j...@apache.org>
Subject [jira] [Commented] (HADOOP-15995) Add ldap.bind.password.alias in LdapGroupsMapping to distinguish aliases when using multiple providers through CompositeGroupsMapping
Date Tue, 11 Dec 2018 03:17:00 GMT

    [ https://issues.apache.org/jira/browse/HADOOP-15995?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16716065#comment-16716065
] 

Íñigo Goiri commented on HADOOP-15995:
--------------------------------------

Thanks [~lukmajercak] for the patch.
Minor comments:
* In the unit test you can do: {{char[] bindpass = "bindpass".toCharArray();}}.
* Is there a way to use the credential to get he password instead of the deprecated method?

> Add ldap.bind.password.alias in LdapGroupsMapping to distinguish aliases when using multiple
providers through CompositeGroupsMapping
> -------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: HADOOP-15995
>                 URL: https://issues.apache.org/jira/browse/HADOOP-15995
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: common
>            Reporter: Lukas Majercak
>            Assignee: Lukas Majercak
>            Priority: Major
>         Attachments: HADOOP-15995.001.patch, HADOOP-15995.002.patch, HADOOP-15995.003.patch,
HADOOP-15995.004.patch
>
>
> Currently, the property name hadoop.security.group.mapping.ldap.bind.password is used
as an alias to get password from CredentialProviders. This has a big issue, which is that
when we configure multiple LdapGroupsMapping providers through CompositeGroupsMapping, they
will all have the same alias, and won't be able to be distinguished. 



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org


Mime
View raw message