David Han created KNOX-3496:
-------------------------------
Summary: LDAP Proxy memberOf optimization doesn't work if memberOf
is an operational attribute
Key: KNOX-3496
URL: https://issues.apache.org/jira/browse/KNOX-3496
Project: Apache Knox
Issue Type: Improvement
Components: Server
Affects Versions: 3.0.0, 3.1.0
Reporter: David Han
Assignee: David Han
Fix For: 3.1.0
Some LDAP servers, e.g., okta, categorize the memberOf attribute as an
operational attribute. This won't be returned when the LdapProxyBackend
requests all user attributes. Modify the backend request to include the
memberOf attribute if the useMemberOf flag is set.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)