[jira] [Commented] (IMPALA-4428) Respect auth_to_local rules from hdfs configs (core-site.xml) for LDAP authentication too

["Thomas Tauber-Marshall (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/IMPALA-4428?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17258537#comment-17258537 ] 

Thomas Tauber-Marshall commented on IMPALA-4428:
------------------------------------------------

Yes, the problem described here is still the case in Impala.

> Respect auth_to_local rules from hdfs configs (core-site.xml) for LDAP authentication too
> -----------------------------------------------------------------------------------------
>
>                 Key: IMPALA-4428
>                 URL: https://issues.apache.org/jira/browse/IMPALA-4428
>             Project: IMPALA
>          Issue Type: Improvement
>          Components: Security
>    Affects Versions: Impala 2.6.0, Impala 2.7.0, Impala 2.5.2
>         Environment: CDH 5.8.3
>            Reporter: Ruslan Dautkhanov
>            Priority: Major
>              Labels: kerberos, ldap, security, usability
>
> IMPALA-2660 added principal mapping for Kerberos authentication but not for LDAP authentication.
> Both Kerberos and LDAP are using Active Directory as a backend to store principals (in many cases), so it's naturally to think this should work for LDAP too
> http://blog.cloudera.com/blog/2014/10/new-in-cdh-5-2-impala-authentication-with-ldap-and-kerberos/
> Fact that IMPALA-2660 works only for Kerberos and not for LDAP principals, breaks authentication in our organization.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscribe@impala.apache.org
For additional commands, e-mail: issues-all-help@impala.apache.org