Naveen Gangam created HIVE-21363: ------------------------------------ Summary: Ldap auth issue: group filter match should be case insensitive Key: HIVE-21363 URL: https://issues.apache.org/jira/browse/HIVE-21363 Project: Hive Issue Type: Improvement Components: HiveServer2 Affects Versions: 3.0.0 Reporter: Naveen Gangam Assignee: Naveen Gangam
Configure HiveServer2 with LDAP auth with (enable ldap, ldap URI, baseDN, userDNPattern, groupDNPattern and groupFilter). If the specified groupFilter case is different than the actual one in directory, then Hive cannot find a match and errors out. For example: groupFilter value=<groupTest> group name in directory server=grouptest. Similar search works by using other ldap clients like ldapsearch (ldap searches are case insensitive). While it is not a major issue as the workaround would be to configure the exact name, it is an easy fix that we should support out of box. -- This message was sent by Atlassian JIRA (v7.6.3#76005)