LINTE created HIVE-8190:
---------------------------

             Summary: LDAP user match for authentication on hiveserver2
                 Key: HIVE-8190
                 URL: https://issues.apache.org/jira/browse/HIVE-8190
             Project: Hive
          Issue Type: Improvement
          Components: Authorization, Clients
    Affects Versions: 0.13.1
         Environment: Centos 6.5
            Reporter: LINTE


Some LDAP has the user composant as CN and not UID.

SO when you try to authenticate the LDAP authentication module of hive try to 
authenticate with the following string :  

uid=$login,basedn

Some AD have user objects that are not uid but cn, so it is be important to 
personalize the kind of objects that the authentication moduel look for in ldap.

We can see an exemple in knox LDAP module configuration the parameter 
main.ldapRealm.userDnTemplate can be configured to look for :
1/ uid : 
 - uid={0},basedn

2/ or cn :
- cn={0},basedn






--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to