[
https://issues.apache.org/jira/browse/HADOOP-10626?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14009668#comment-14009668
]
Jason Hubbard commented on HADOOP-10626:
----------------------------------------
The only useful test I could think to add was an integration test, but there is
no current support for ldap integration that I am aware. The integration test
would test to make sure group name attribute was returned as well as user full
dn. I have tested this manually and all groups for users were successfully
returned.
> Limit Returning Attributes for LDAP search
> ------------------------------------------
>
> Key: HADOOP-10626
> URL: https://issues.apache.org/jira/browse/HADOOP-10626
> Project: Hadoop Common
> Issue Type: Improvement
> Components: security
> Affects Versions: 2.3.0
> Reporter: Jason Hubbard
> Labels: easyfix, newbie, performance
> Attachments: HADOOP-10626.patch
>
>
> When using Hadoop Ldap Group mappings in an enterprise environment, searching
> groups and returning all members can take a long time causing a timeout.
> This causes not all groups to be returned for a user. Because the first
> search only searches for the user dn and the second search retrieves the
> group member attribute, we only need to return the group member attribute on
> the search speeding up the search.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
