You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues-all@impala.apache.org by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2020/07/25 18:25:00 UTC

[jira] [Commented] (IMPALA-2563) Support LDAP search bind operations

    [ https://issues.apache.org/jira/browse/IMPALA-2563?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17165093#comment-17165093 ] 

ASF subversion and git services commented on IMPALA-2563:
---------------------------------------------------------

Commit 6c3ff1927e0aeacd974d2869ef88dc0233de22d6 in impala's branch refs/heads/master from Thomas Tauber-Marshall
[ https://gitbox.apache.org/repos/asf?p=impala.git;h=6c3ff19 ]

IMPALA-9988: Integrate ldap filters and proxy users

IMPALA-2563 recently added support for specifying ldap group and user
filters.

Previously, if an authorized proxy user connected, the filters were
applied to the proxy user. This patch fixes it so that the filters
will be applied to the delegate user instead.

Testing:
- Added a test in LdapImpalaShellTest

Change-Id: I92ff3ca543516a8c4fa0ec7533f7b9d8da6e2434
Reviewed-on: http://gerrit.cloudera.org:8080/16234
Reviewed-by: Impala Public Jenkins <im...@cloudera.com>
Tested-by: Impala Public Jenkins <im...@cloudera.com>


> Support LDAP search bind operations
> -----------------------------------
>
>                 Key: IMPALA-2563
>                 URL: https://issues.apache.org/jira/browse/IMPALA-2563
>             Project: IMPALA
>          Issue Type: Improvement
>          Components: Security
>    Affects Versions: Impala 2.2.4
>            Reporter: Mike Yoder
>            Assignee: Thomas Tauber-Marshall
>            Priority: Minor
>              Labels: security
>             Fix For: Impala 4.0
>
>
> Today Impala supports a simple direct bind model. This improvement jira is to bring Impala's LDAP model to be in line with Hive's. Please see in particular https://issues.apache.org/jira/browse/HIVE-7193 and https://cwiki.apache.org/confluence/display/Hive/User+and+Group+Filter+Support+with+LDAP+Atn+Provider+in+HiveServer2.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscribe@impala.apache.org
For additional commands, e-mail: issues-all-help@impala.apache.org