You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@kylin.apache.org by "langdamao (JIRA)" <ji...@apache.org> on 2019/07/05 03:45:00 UTC
[jira] [Updated] (KYLIN-4073) No role&groups login Kylin with LDAP
successfully by both admin user and aother normal user
[ https://issues.apache.org/jira/browse/KYLIN-4073?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
langdamao updated KYLIN-4073:
-----------------------------
Summary: No role&groups login Kylin with LDAP successfully by both admin user and aother normal user (was: No role&groups login Kylin with LDAP successfully by both admin user and aother normal use)
> No role&groups login Kylin with LDAP successfully by both admin user and aother normal user
> -------------------------------------------------------------------------------------------
>
> Key: KYLIN-4073
> URL: https://issues.apache.org/jira/browse/KYLIN-4073
> Project: Kylin
> Issue Type: Bug
> Components: Web
> Affects Versions: v2.6.1
> Reporter: langdamao
> Priority: Major
> Fix For: Future
>
> Attachments: PastedGraphic-1.png, PastedGraphic-2.png
>
> Original Estimate: 24h
> Remaining Estimate: 24h
>
> I’ve login Kylin with LDAP successfully by both admin user and aother normal user ，but got two questions.
> Q1. Role is “No results match” In project-> Access webpage (see {{!PastedGraphic-1.png|thumbnail!}}{{[^PastedGraphic-1.png]}})
>
> Q2. groups is “No results match” In DataSource->access webpage(see {{[^PastedGraphic-2.png]}})
>
> I wonder how to create a new role | groups ?
>
> In addition for detail, I‘ve set configs kylin.security.ldap.user-group-search-base &kylin.security.ldap.service-group-search-base & kylin.security.acl.admin-role. And the admin group can be matched. Here is part of log when user login :
> {code:java}
> 2019-07-04 14:07:19,784 DEBUG [http-nio-7070-exec-3] security.KylinAuthenticationProvider:114 : User maohongyue authorities : [dev_all, data, new-user-dev, kylin_admin_group, userprofile, ROLE_ADMIN]
> {code}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)