You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@hive.apache.org by "Naveen Gangam (JIRA)" <ji...@apache.org> on 2019/02/28 21:30:00 UTC

[jira] [Created] (HIVE-21363) Ldap auth issue: group filter match should be case insensitive

Naveen Gangam created HIVE-21363:
------------------------------------

             Summary: Ldap auth issue: group filter match should be case insensitive
                 Key: HIVE-21363
                 URL: https://issues.apache.org/jira/browse/HIVE-21363
             Project: Hive
          Issue Type: Improvement
          Components: HiveServer2
    Affects Versions: 3.0.0
            Reporter: Naveen Gangam
            Assignee: Naveen Gangam


Configure HiveServer2 with LDAP auth with (enable ldap, ldap URI, baseDN, userDNPattern, groupDNPattern and groupFilter). 

If the specified groupFilter case is different than the actual one in directory, then Hive cannot find a match and errors out.

For example:
groupFilter value=<groupTest>
group name in directory server=grouptest.

Similar search works by using other ldap clients like ldapsearch (ldap searches are case insensitive). 
While it is not a major issue as the workaround would be to configure the exact name, it is an easy fix that we should support out of box.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)