You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@nifi.apache.org by "Matt Gilman (JIRA)" <ji...@apache.org> on 2017/11/03 16:52:00 UTC

[jira] [Created] (NIFI-4567) LdapUserGroupProvider: Allow admin to configure which group membership attribute

Matt Gilman created NIFI-4567:
---------------------------------

             Summary: LdapUserGroupProvider: Allow admin to configure which group membership attribute
                 Key: NIFI-4567
                 URL: https://issues.apache.org/jira/browse/NIFI-4567
             Project: Apache NiFi
          Issue Type: Bug
          Components: Extensions
            Reporter: Matt Gilman
            Assignee: Matt Gilman
            Priority: Major


Currently, group membership is defined using a fully qualified DN between user and group or between group and user. When membership is defined through a user, the group DN is required. When membership is defined through a group, the user DN is required.

We should add another property to configure which attribute in the referenced group or user should be used as the value of the user's group attribute or the group's user attribute. For instance, if the user's member attribute contains the value 'group1' this new property would be the group attribute that returns the value 'group1'. For backwards compatibility, when these new properties are blank a full DN is assumed.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)