Shulou(Shulou.com)06/01 Report--

This article shows you how to parse CDSW integrated Active Directory login exception analysis, the content is concise and easy to understand, absolutely can make your eyes bright, through the detailed introduction of this article, I hope you can get something.

one

Problem phenomenon

Test environment

1.Redhat7.4

2.CDH6.2.0

3.CDSW1.5.0

After CDSW integrates AD, some users prompt "Email address is invalid." when they log in.

two

Abnormal recurrence and analysis

1. First create a cdhadmin user on AD

2.Fayson did not encounter "Email address is invalid." during login testing after integrating AD services in the local test environment. Abnormal

3. Check CDSW's PG database and see that the synchronized user information is displayed as follows. You can see that the synchronized user email in AD is "user name @ AD domain name".

4.Fayson does not specify the user's email when creating a user on AD, indicating that when an AD user logs in to CDSW, if the user's email is empty, the user will automatically use the login name and AD domain name to concatenate an email address. Next, confirm the conjecture.

5. Randomly change the email address of a cdhadmin user to "test"

6. Delete cdhadmin user information from CDSW database

7. Log in again using the cdhadmin user

8. Repeat the above steps 5-7 to modify the AD user's email to a properly formatted mailbox test@qq.com for testing

User logged in to CDSW successfully

Data display of users table in CDSW database

Through the above tests and verification, the following conclusions are drawn:

1. When the user's Email address in AD is empty, the user name and AD domain name will be spliced into the user's Email address and saved to the users table in the CDSW database after the user has successfully logged in.

two。 When the user's Email address in AD is a malformed Email, the user logs in and prompts "Email address is invalid." because CDSW verifies the user's mailbox format, it will be prompted as above.

3. When the user's Email address in AD is in the correct format, the user can log in to CDSW normally.

After integrating AD or LDAP, CDSW will write the basic information of the user to the database after the user has successfully logged in (for basic information, please refer to the information when CDSW registers the account).

After the integration of AD or LDAP, the account password is still verified by AD or LDAP, but the user's information will eventually be saved to the CDSW database. The user who logs in for the first time will follow the registration process to verify the information.

The above content is how to analyze login exception analysis after CDSW integrates Active Directory. Have you learned any knowledge or skills? If you want to learn more skills or enrich your knowledge reserve, you are welcome to follow the industry information channel.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.