[ 
https://issues.apache.org/jira/browse/IMPALA-2563?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17165093#comment-17165093
 ] 

ASF subversion and git services commented on IMPALA-2563:
---------------------------------------------------------

Commit 6c3ff1927e0aeacd974d2869ef88dc0233de22d6 in impala's branch 
refs/heads/master from Thomas Tauber-Marshall
[ https://gitbox.apache.org/repos/asf?p=impala.git;h=6c3ff19 ]

IMPALA-9988: Integrate ldap filters and proxy users

IMPALA-2563 recently added support for specifying ldap group and user
filters.

Previously, if an authorized proxy user connected, the filters were
applied to the proxy user. This patch fixes it so that the filters
will be applied to the delegate user instead.

Testing:
- Added a test in LdapImpalaShellTest

Change-Id: I92ff3ca543516a8c4fa0ec7533f7b9d8da6e2434
Reviewed-on: http://gerrit.cloudera.org:8080/16234
Reviewed-by: Impala Public Jenkins <[email protected]>
Tested-by: Impala Public Jenkins <[email protected]>


> Support LDAP search bind operations
> -----------------------------------
>
>                 Key: IMPALA-2563
>                 URL: https://issues.apache.org/jira/browse/IMPALA-2563
>             Project: IMPALA
>          Issue Type: Improvement
>          Components: Security
>    Affects Versions: Impala 2.2.4
>            Reporter: Mike Yoder
>            Assignee: Thomas Tauber-Marshall
>            Priority: Minor
>              Labels: security
>             Fix For: Impala 4.0
>
>
> Today Impala supports a simple direct bind model. This improvement jira is to 
> bring Impala's LDAP model to be in line with Hive's. Please see in particular 
> https://issues.apache.org/jira/browse/HIVE-7193 and 
> https://cwiki.apache.org/confluence/display/Hive/User+and+Group+Filter+Support+with+LDAP+Atn+Provider+in+HiveServer2.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to