[jira] [Closed] (IMPALA-11897) Fix default LDAP group search filter used in search bind authentication

["Gergely Farkas (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/IMPALA-11897?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Gergely Farkas closed IMPALA-11897.
-----------------------------------
    Resolution: Fixed

> Fix default LDAP group search filter used in search bind authentication
> -----------------------------------------------------------------------
>
>                 Key: IMPALA-11897
>                 URL: https://issues.apache.org/jira/browse/IMPALA-11897
>             Project: IMPALA
>          Issue Type: Bug
>            Reporter: Gergely Farkas
>            Assignee: Gergely Farkas
>            Priority: Trivial
>
> When LDAP search bind authentication is enabled ({_}ldap_search_bind_authentication=true{_}) and no custom user/group filter is specified ({_}ldap_user_filter{_} and _ldap_group_filter_ flags are empty), then LDAP auth uses the default filters that are defined for Active Directory. However, the group search filter does not work due to a small bug.
> The error we experience in this case:
> {noformat}
> LDAP search failed with base DN=DC=qe-ad-1,DC=cloudera,DC=com and filter=(&(objectClass=group)(member=CN=cm-admin,CN=Users,DC=qe-ad-1,DC=cloudera,DC=com) : Bad search filter{noformat}
>  



--
This message was sent by Atlassian Jira
(v8.20.10#820010)