vyommani opened a new pull request, #1174: URL: https://github.com/apache/ranger/pull/1174
## What changes were proposed in this pull request? When Ranger Admin is configured for LDAP or Active Directory authentication (`ranger.authentication.method=LDAP` or `ACTIVE_DIRECTORY`), `RangerAuthenticationProvider` did not check the local Ranger account's status after a successful directory bind. This meant a user's local account status could be out of sync with their actual ability to sign in when directory-based authentication was used, unlike local/JDBC authentication, which already respects account status via the `STATUS` column read by the JDBC user-details query. This change adds a status check, `UserMgr#isUserDisabled`, and calls it from `RangerAuthenticationProvider#authenticate` right after each successful LDAP, LDAP-bind, AD-bind, AD, PAM, and UNIX authentication branch, before the method returns — so a disabled local account is rejected consistently across all supported authentication methods. ## How was this patch tested? added new unit tests. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
