Michal Vince created ZEPPELIN-3875:
--------------------------------------

             Summary: Groups are not derived when using ActiveDirectory
                 Key: ZEPPELIN-3875
                 URL: https://issues.apache.org/jira/browse/ZEPPELIN-3875
             Project: Zeppelin
          Issue Type: Bug
          Components: security
    Affects Versions: 0.8.0, 0.7.3
            Reporter: Michal Vince


ActiveDirectoryGroupRealm is using "userPrincipalName" for deriving groups that 
user belongs to, however:
 * this field is not mandatory in ActiveDirectory
 * can contain user email where domain is different from REALM

in such a scenario user is able to log in but no groups are derived



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to