You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hive.apache.org by "Kapil Rastogi (JIRA)" <ji...@apache.org> on 2016/08/20 01:31:20 UTC
[jira] [Created] (HIVE-14592) In LDAP authentication 'group filter'
match should be case insensitive
Kapil Rastogi created HIVE-14592:
------------------------------------
Summary: In LDAP authentication 'group filter' match should be case insensitive
Key: HIVE-14592
URL: https://issues.apache.org/jira/browse/HIVE-14592
Project: Hive
Issue Type: Bug
Components: Authentication
Affects Versions: 1.2.0
Reporter: Kapil Rastogi
Assignee: Kapil Rastogi
Configure openLDAP server with following configurations(enable ldap, ldap URI, baseDN, userDNPattern, groupDNPattern and groupFilter). If the specified groupFilter case is different than the actual one in directory than Hive cannot find a match and errors out.
Provided groupFilter value <groupTest>
Actual group name in directory server - grouptest.
Similar search works by using ldapsearch (ldap searches are case insensitive).
Error message snippet -
avax.security.sasl.AuthenticationException: Authentication failed: User not a member of listed groups]
at org.apache.hive.service.auth.PlainSaslServer.evaluateResponse(PlainSaslServer.java:109)
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)