[
https://issues.apache.org/jira/browse/KNOX-2783?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Attila Magyar updated KNOX-2783:
--------------------------------
Description:
If there is no group name after the dot, the user is getting mapped to an ""
group.
{code}
<provider>
<role>identity-assertion</role>
<name>HadoopGroupProvider</name>
<enabled>true</enabled>
<param>
<name>hadoop.security.group.mapping</name>
<value>org.apache.hadoop.security.ShellBasedUnixGroupsMapping</value>
</param>
<param>
<name>group.mapping.</name>
<value>true</value>
</param>
</provider>
{code}
was:
If there is no group name after the dot, the user is getting mapped to an ""
group.
{code}
<provider>
<role>identity-assertion</role>
<name>HadoopGroupProvider</name>
<enabled>true</enabled>
<param>
<name>hadoop.security.group.mapping</name>
<value>org.apache.hadoop.security.ShellBasedUnixGroupsMapping</value>
</param>
<param>
<name>group.mapping.</name>
<value>true</value>
</param>
</provider>
{code}
> User can be mapped to an empty virtual group
> --------------------------------------------
>
> Key: KNOX-2783
> URL: https://issues.apache.org/jira/browse/KNOX-2783
> Project: Apache Knox
> Issue Type: Improvement
> Reporter: Attila Magyar
> Assignee: Attila Magyar
> Priority: Minor
>
> If there is no group name after the dot, the user is getting mapped to an ""
> group.
> {code}
> <provider>
> <role>identity-assertion</role>
> <name>HadoopGroupProvider</name>
> <enabled>true</enabled>
> <param>
> <name>hadoop.security.group.mapping</name>
>
> <value>org.apache.hadoop.security.ShellBasedUnixGroupsMapping</value>
> </param>
> <param>
> <name>group.mapping.</name>
> <value>true</value>
> </param>
> </provider>
> {code}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
