Hari Sekhon created ZEPPELIN-2794:
-------------------------------------
Summary: User/group mapping rules similar to Hadoop's auth_to_local
Key: ZEPPELIN-2794
URL: https://issues.apache.org/jira/browse/ZEPPELIN-2794
Project: Zeppelin
Issue Type: New Feature
Components: Core
Affects Versions: 0.7.0
Environment: HDP 2.6 + Kerberos + AD LDAP multi-domain forest
Reporter: Hari Sekhon
Priority: Blocker
Feature Request to add user/group mapping rules similar to Hadoop's
auth_to_local.
This will allow munging users/groups and rule based remappings to differentiate
duplicate users in multi-domain Active Directory forests where the LDAP results
returned from the global catalog include duplicate usernames which need to be
translated with a prefix/suffix in order to differentiate between domains to
prevent users from different domains sharing logins, permissions etc.
I understand that Shiro is responsible for this integration and have raised
SHIRO-631, but thought I'd create this top level Zeppelin ticket to track
Zeppelin's ability to support this scenario as it'll need to upgrade to a later
Shiro version when Shiro supports this.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
