[jira] [Created] (HADOOP-18388) Allow dynamic groupSearchFilter in LdapGroupsMapping

["Ayush Saxena (Jira)" <ji...@apache.org>]

Ayush Saxena created HADOOP-18388:
-------------------------------------

             Summary: Allow dynamic groupSearchFilter in LdapGroupsMapping
                 Key: HADOOP-18388
                 URL: https://issues.apache.org/jira/browse/HADOOP-18388
             Project: Hadoop Common
          Issue Type: Improvement
          Components: security
            Reporter: Ayush Saxena


As of now the lookupGroup() method doesn't allow to have placeholders in 

groupSearchFilter, so that can not be dynamically adjusted.

If we have placeholders for groupSearchFilter like: (&(|(XYZ=\{0})(ABC=\{1}))(objectClass=posixGroup))

This fails here:

 
{code:java}
groupResults =
    c.search(groupbaseDN,
        "(&" + groupSearchFilter + "(" + groupMemberAttr + "={0}))",
        new Object[]{userDn},
        SEARCH_CONTROLS); {code}
With 

 

 
{noformat}
javax.naming.directory.InvalidSearchFilterException: number exceeds argument list: 1; remaining name {noformat}
 

** Dropped off or changed the details above which I thought won't be safe to disclose.

 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org