Naveen Gangam created HIVE-21363:
------------------------------------

             Summary: Ldap auth issue: group filter match should be case 
insensitive
                 Key: HIVE-21363
                 URL: https://issues.apache.org/jira/browse/HIVE-21363
             Project: Hive
          Issue Type: Improvement
          Components: HiveServer2
    Affects Versions: 3.0.0
            Reporter: Naveen Gangam
            Assignee: Naveen Gangam


Configure HiveServer2 with LDAP auth with (enable ldap, ldap URI, baseDN, 
userDNPattern, groupDNPattern and groupFilter). 

If the specified groupFilter case is different than the actual one in 
directory, then Hive cannot find a match and errors out.

For example:
groupFilter value=<groupTest>
group name in directory server=grouptest.

Similar search works by using other ldap clients like ldapsearch (ldap searches 
are case insensitive). 
While it is not a major issue as the workaround would be to configure the exact 
name, it is an easy fix that we should support out of box.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to