Gergely Farkas created IMPALA-11897:
---------------------------------------
Summary: Fix default LDAP group search filter used in search bind
authentication
Key: IMPALA-11897
URL: https://issues.apache.org/jira/browse/IMPALA-11897
Project: IMPALA
Issue Type: Bug
Reporter: Gergely Farkas
Assignee: Gergely Farkas
When LDAP search bind authentication is enabled
({_}ldap_search_bind_authentication=true{_}) and no custom user/group filter is
specified ({_}ldap_user_filter{_} and _ldap_group_filter_ flags are empty),
then LDAP auth uses the default filters that are defined for Active Directory.
However, the group search filter does not work due to a small bug.
The error we experience in this case:
{noformat}
LDAP search failed with base DN=DC=qe-ad-1,DC=cloudera,DC=com and
filter=(&(objectClass=group)(member=CN=cm-admin,CN=Users,DC=qe-ad-1,DC=cloudera,DC=com)
: Bad search filter{noformat}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
