[jira] [Created] (IMPALA-11897) Fix default LDAP group search filter used in search bind authentication

["Gergely Farkas (Jira)" <ji...@apache.org>]

Gergely Farkas created IMPALA-11897:
---------------------------------------

             Summary: Fix default LDAP group search filter used in search bind authentication
                 Key: IMPALA-11897
                 URL: https://issues.apache.org/jira/browse/IMPALA-11897
             Project: IMPALA
          Issue Type: Bug
            Reporter: Gergely Farkas
            Assignee: Gergely Farkas


When LDAP search bind authentication is enabled ({_}ldap_search_bind_authentication=true{_}) and no custom user/group filter is specified ({_}ldap_user_filter{_} and _ldap_group_filter_ flags are empty), then LDAP auth uses the default filters that are defined for Active Directory. However, the group search filter does not work due to a small bug.

The error we experience in this case:
{noformat}
LDAP search failed with base DN=DC=qe-ad-1,DC=cloudera,DC=com and filter=(&(objectClass=group)(member=CN=cm-admin,CN=Users,DC=qe-ad-1,DC=cloudera,DC=com) : Bad search filter{noformat}
 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)