[jira] [Commented] (KNOX-461) Leverage Directory Computed Attribute for User Group Discovery

["Kevin Risden (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/KNOX-461?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15401297#comment-15401297 ] 

Kevin Risden commented on KNOX-461:
-----------------------------------

For testing of this, Apache DS doesn't currently support virtual attributes. We should be able to fake it by actually adding memberOf as a real attribute.

* DIRSERVER-1067 - Add support for virtual attributes
* DIRSERVER-1844 - Add support for memberOf virtual attribute

> Leverage Directory Computed  Attribute for User Group Discovery
> ---------------------------------------------------------------
>
>                 Key: KNOX-461
>                 URL: https://issues.apache.org/jira/browse/KNOX-461
>             Project: Apache Knox
>          Issue Type: Improvement
>            Reporter: Dilli Arumugam
>            Priority: Critical
>             Fix For: 0.10.0
>
>
> Leverage Directory Computed  Attribute for User Group Discovery
> We should use computed attribute memberof supported by Active Driectory to discover groups of the authenticated user. This would significantly boost performance as compared we computing groups using group search.
> OpenLDAP also could be configured to return computed groups.
> However, OpenLDAP would return this attribute as memberof.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)