stackabletech / stackabletech/druid-operator
Support LDAP authentication without bind credentials
Nobody has claimed this yet.
- Dominant language
- Rust
- Stars
- 12
- Forks
- 1
- Avg merge
- 1d 17h
- Merged PRs (30d)
- 10
Description
A non-stated requirement of https://github.com/stackabletech/druid-operator/pull/374
As part of work on first LDAP support in https://github.com/stackabletech/druid-operator/pull/374 it turned out that Druid does not seem to support connecting to an LDAP service without bind credentials.
If this scenario is a priority, we will need to investigate it and maybe contribute a fix to Druid.
Various combinations of "don't specify LDAP bind username and password settings" and "set those settings to an empty string" have been tried, but have not resulted in the desired behaviour.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing pull request #374 and the attempted LDAP configuration combinations described here. Investigate whether Apache Druid supports LDAP connections without bind credentials and whether the required change belongs in Druid or this operator. Done means the unauthenticated LDAP scenario works as intended, with any necessary upstream contribution identified.
Written by the indexing model from the issue text.
Assessment
- Domain
- authentication, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100