[
https://issues.apache.org/jira/browse/HADOOP-8121?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13226454#comment-13226454
]
Jonathan Natkins commented on HADOOP-8121:
------------------------------------------
There are two types of searches that get executed: 1) a group search, in which
we're specifying the distinguished name that we're searching for, so we should
only ever get back one result, or 2) a user search, in which case the filter
should be something along the lines of (sAMAccountName={0}) or (uid={0}), which
should only return one result, if configured correctly.
I'll acknowledge that this doesn't prevent an admin from misconfiguring the
user search filter to execute a query that brings back a large result set, e.g.
(objectclass=user), but if it does throw an exception, it will caught and
logged appropriately.
> Active Directory Group Mapping Service
> --------------------------------------
>
> Key: HADOOP-8121
> URL: https://issues.apache.org/jira/browse/HADOOP-8121
> Project: Hadoop Common
> Issue Type: New Feature
> Components: security
> Reporter: Jonathan Natkins
> Assignee: Jonathan Natkins
> Attachments: HADOOP-8121.patch, HADOOP-8121.patch, HADOOP-8121.patch,
> HADOOP-8121.patch, HADOOP-8121.patch, HADOOP-8121.patch, HADOOP-8121.patch,
> HADOOP-8121.patch
>
>
> Planning on building a group mapping service that will go and talk directly
> to an Active Directory setup to get group memberships
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
