[ 
https://issues.apache.org/jira/browse/KNOX-285?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13915784#comment-13915784
 ] 

Larry McCay commented on KNOX-285:
----------------------------------

That isn't exactly a typo - it is how Active Directory schemas are generally 
defined.
It is, however, not how our OOTB apacheDS schema and users.ldif is defined - 
general LDAP deployments typically use uid - as your patch provides.

I think that we should probably document both.
Add a comment inline with the config or a block afterward to the affect off:

NOTE: for Active Directory you should use the following for the 
main.ldapRealm.memberAttributeValueTemplate value...

> Typo in LDAPGroupLookup documentation
> -------------------------------------
>
>                 Key: KNOX-285
>                 URL: https://issues.apache.org/jira/browse/KNOX-285
>             Project: Apache Knox
>          Issue Type: Bug
>            Reporter: Vladimir Tkhir
>            Assignee: Vladimir Tkhir
>            Priority: Minor
>         Attachments: KNOX-285.patch
>
>
> "cn={0},ou=people,dc=hadoop,dc=apache,dc=org" is not valid value for 
> main.ldapRealm.memberAttributeValueTemplate attribute. Should be 
> "uid={0},ou=people,dc=hadoop,dc=apache,dc=org"



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)

Reply via email to