hive-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Kapil Rastogi (JIRA)" <j...@apache.org>
Subject [jira] [Created] (HIVE-14592) In LDAP authentication 'group filter' match should be case insensitive
Date Sat, 20 Aug 2016 01:31:20 GMT
Kapil Rastogi created HIVE-14592:
------------------------------------

             Summary: In LDAP authentication 'group filter' match should be case insensitive
                 Key: HIVE-14592
                 URL: https://issues.apache.org/jira/browse/HIVE-14592
             Project: Hive
          Issue Type: Bug
          Components: Authentication
    Affects Versions: 1.2.0
            Reporter: Kapil Rastogi
            Assignee: Kapil Rastogi


Configure openLDAP server with following configurations(enable ldap, ldap URI, baseDN, userDNPattern,
groupDNPattern and groupFilter). If the specified groupFilter case is different than the actual
one in directory than Hive cannot find a match and errors out.

Provided groupFilter value <groupTest>
Actual group name in directory server - grouptest.

Similar search works by using ldapsearch (ldap searches are case insensitive).

Error message snippet - 
avax.security.sasl.AuthenticationException: Authentication failed: User not a member of listed
groups]
at org.apache.hive.service.auth.PlainSaslServer.evaluateResponse(PlainSaslServer.java:109)



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message