Attila Magyar created KNOX-2783:
-----------------------------------

             Summary: User can be mapped to an empty virtual group
                 Key: KNOX-2783
                 URL: https://issues.apache.org/jira/browse/KNOX-2783
             Project: Apache Knox
          Issue Type: Improvement
            Reporter: Attila Magyar
            Assignee: Attila Magyar


If there is no group name after the dot, the user is getting mapped to an "" 
group.

{code}
<provider>
         <role>identity-assertion</role>
         <name>HadoopGroupProvider</name>
         <enabled>true</enabled>
                 <param>
            <name>hadoop.security.group.mapping</name>
            
<value>org.apache.hadoop.security.ShellBasedUnixGroupsMapping</value>
        </param>
        <param>
            <name>group.mapping.</name>
            <value>true</value>
        </param>
      </provider>
{code}



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to