Function DoLdapCheckFilters

be/src/rpc/authentication.cc:360–375

Calls into the LDAP utils to check the provided group filters

// Calls into the LDAP utils to check the provided group filters
bool DoLdapCheckFilters(const char* user) {
  ImpalaLdap* ldap = AuthManager::GetInstance()->GetLdap();
  ImpalaServer* server = ExecEnv::GetInstance()->impala_server();
  if (server == nullptr) {
    LOG(FATAL) << "Invalid config: SASL LDAP is only supported for client connections "
               << "to an impalad.";
  }
  // If the user is an authorized proxy user, we do not yet know the effective user as
  // it may be set by 'impala.doas.user', in which case we defer checking LDAP filters
  // until OpenSession(). Otherwise, we prefer to check the filters as easly as
  // possible, so check them here.
  if (server->IsAuthorizedProxyUser(user)) {
    return true;
  }
  return ldap->LdapCheckFilters(user);
}

// Calls into the LDAP utils to check the provided user/pass,
// and the provided group filters.