[ https://issues.apache.org/jira/browse/KNOX-285?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13915784#comment-13915784 ]
Larry McCay commented on KNOX-285: ---------------------------------- That isn't exactly a typo - it is how Active Directory schemas are generally defined. It is, however, not how our OOTB apacheDS schema and users.ldif is defined - general LDAP deployments typically use uid - as your patch provides. I think that we should probably document both. Add a comment inline with the config or a block afterward to the affect off: NOTE: for Active Directory you should use the following for the main.ldapRealm.memberAttributeValueTemplate value... > Typo in LDAPGroupLookup documentation > ------------------------------------- > > Key: KNOX-285 > URL: https://issues.apache.org/jira/browse/KNOX-285 > Project: Apache Knox > Issue Type: Bug > Reporter: Vladimir Tkhir > Assignee: Vladimir Tkhir > Priority: Minor > Attachments: KNOX-285.patch > > > "cn={0},ou=people,dc=hadoop,dc=apache,dc=org" is not valid value for > main.ldapRealm.memberAttributeValueTemplate attribute. Should be > "uid={0},ou=people,dc=hadoop,dc=apache,dc=org" -- This message was sent by Atlassian JIRA (v6.1.5#6160)