Kapil Rastogi created HIVE-14592:
------------------------------------
Summary: In LDAP authentication 'group filter' match should be
case insensitive
Key: HIVE-14592
URL: https://issues.apache.org/jira/browse/HIVE-14592
Project: Hive
Issue Type: Bug
Components: Authentication
Affects Versions: 1.2.0
Reporter: Kapil Rastogi
Assignee: Kapil Rastogi
Configure openLDAP server with following configurations(enable ldap, ldap URI,
baseDN, userDNPattern, groupDNPattern and groupFilter). If the specified
groupFilter case is different than the actual one in directory than Hive cannot
find a match and errors out.
Provided groupFilter value <groupTest>
Actual group name in directory server - grouptest.
Similar search works by using ldapsearch (ldap searches are case insensitive).
Error message snippet -
avax.security.sasl.AuthenticationException: Authentication failed: User not a
member of listed groups]
at
org.apache.hive.service.auth.PlainSaslServer.evaluateResponse(PlainSaslServer.java:109)
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
