LINTE created HIVE-8190: --------------------------- Summary: LDAP user match for authentication on hiveserver2 Key: HIVE-8190 URL: https://issues.apache.org/jira/browse/HIVE-8190 Project: Hive Issue Type: Improvement Components: Authorization, Clients Affects Versions: 0.13.1 Environment: Centos 6.5 Reporter: LINTE
Some LDAP has the user composant as CN and not UID. SO when you try to authenticate the LDAP authentication module of hive try to authenticate with the following string : uid=$login,basedn Some AD have user objects that are not uid but cn, so it is be important to personalize the kind of objects that the authentication moduel look for in ldap. We can see an exemple in knox LDAP module configuration the parameter main.ldapRealm.userDnTemplate can be configured to look for : 1/ uid : - uid={0},basedn 2/ or cn : - cn={0},basedn -- This message was sent by Atlassian JIRA (v6.3.4#6332)