Does kyuubi ldap support configuring user whitelists？

[conorzhao]

I would like to configure some users separately to skip ldap authentication。

[pan3793]

kyuubi.authentication.ldap.userFilter should work.

https://kyuubi.readthedocs.io/en/master/security/ldap.html
https://cwiki.apache.org/confluence/display/Hive/User+and+Group+Filter+Support+with+LDAP+Atn+Provider+in+HiveServer2#UserandGroupFilterSupportwithLDAPAtnProviderinHiveServer2-UserandGroupFilterSupportwithLDAP

[conorzhao]

I tested and found that this configuration is not a whitelist, but a search user list. After configuration, only users in the configuration list can authenticate and log in

[pan3793]

what do you mean "whitelist"?

[conorzhao]

Configured users can skip permission authentication

[pan3793]

sounds like an uncommon cases, consider implement a custom authz plugin

[conorzhao]

ok，thx