impala-reviews mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Impala Public Jenkins (Code Review)" <>
Subject [Impala-ASF-CR] IMPALA-2563: Support LDAP search bind operations
Date Wed, 01 Apr 2020 00:54:51 GMT
Impala Public Jenkins has submitted this change and it was merged. (

Change subject: IMPALA-2563: Support LDAP search bind operations

IMPALA-2563: Support LDAP search bind operations

This patch adds a number of new options for controlling LDAP
by restricting authentication to particular users and/or members of
particular groups:
--ldap_group_filter: comma separated list of authorized groups
--ldap_user_filter: comma separated list of authorized users

There are also options to control how LDAP is searched when applying
these filters:

These options were modelled on equivalent options in Hive, see:

This patch also refactors LDAP related functionality into a utility
class, both to make more manageable and to
facilitate follow up work that will add LDAP authentication options
for the webserver.

- Added a FE custom cluster test that sets --ldap_group_filter and
  --ldap_user_filter and verifies expected behavior.

Change-Id: I7502a96e9a3c16faa67c03ffac54df2bdebbca8c
Reviewed-by: Impala Public Jenkins <>
Tested-by: Impala Public Jenkins <>
M be/src/common/
M be/src/rpc/
M be/src/rpc/authentication.h
M be/src/util/CMakeLists.txt
A be/src/util/
A be/src/util/ldap-util.h
M fe/src/test/java/org/apache/impala/customcluster/
M fe/src/test/resources/users.ldif
8 files changed, 495 insertions(+), 166 deletions(-)

  Impala Public Jenkins: Looks good to me, approved; Verified

To view, visit
To unsubscribe, visit

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: merged
Gerrit-Change-Id: I7502a96e9a3c16faa67c03ffac54df2bdebbca8c
Gerrit-Change-Number: 15570
Gerrit-PatchSet: 6
Gerrit-Owner: Thomas Tauber-Marshall <>
Gerrit-Reviewer: Impala Public Jenkins <>
Gerrit-Reviewer: Thomas Tauber-Marshall <>
Gerrit-Reviewer: Tim Armstrong <>

  • Unnamed multipart/alternative (inline, 8-Bit, 0 bytes)
View raw message