https://community.cloudera.com/t5/Archives-of-Support-Questions/Can-I-also-Lower-Case-User-Names-in-Apache-Knox/m-p/94878#M8148 <P>Currently Knox uses the username returned by the authentication provider. This identity can then be manipulated by an identity-assertion provider. However at this time none of the "out of the box" identity-assertion providers support an ability to lower case the identity. This would however be very easy to implement and plug in "on site". It would require implementing a custom identity-assertion provider that essentially implements the mapUserPrincial method of org.apache.hadoop.gateway.identityasserter.common.filter.AbstractIdentityAssertionFilter in module gateway-provider-identity-assertion-common. The whole process of writing and hooking up a Knox extension plugin is described in Larry's blog. <A href="http://hortonworks.com/blog/adding-federation-provider-apache-knox/" target="_blank">http://hortonworks.com/blog/adding-federation-provider-apache-knox/</A> This described a federation provider but the overall mechanism is similar. General details about Knox development can be found in the dev guide. <A href="http://knox.apache.org/books/knox-0-6-0/dev-guide.html" target="_blank">http://knox.apache.org/books/knox-0-6-0/dev-guide.html</A></P> Mon, 05 Oct 2015 22:09:16 GMT kevin_minder 2015-10-05T22:09:16Z https://community.cloudera.com/t5/Archives-of-Support-Questions/Can-I-also-Lower-Case-User-Names-in-Apache-Knox/m-p/94876#M8146 <P>All usernames are lower cased fetching from AD/LDAP, can I also force Knox to lower case the name?</P> Mon, 05 Oct 2015 21:35:32 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/Can-I-also-Lower-Case-User-Names-in-Apache-Knox/m-p/94876#M8146 hkropp 2015-10-05T21:35:32Z https://community.cloudera.com/t5/Archives-of-Support-Questions/Can-I-also-Lower-Case-User-Names-in-Apache-Knox/m-p/94877#M8147 <P>The case of the username seems to depend on the user input, so there is no need to force lower or upper case, right?</P> Mon, 05 Oct 2015 21:55:42 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/Can-I-also-Lower-Case-User-Names-in-Apache-Knox/m-p/94877#M8147 hkropp 2015-10-05T21:55:42Z https://community.cloudera.com/t5/Archives-of-Support-Questions/Can-I-also-Lower-Case-User-Names-in-Apache-Knox/m-p/94878#M8148 <P>Currently Knox uses the username returned by the authentication provider. This identity can then be manipulated by an identity-assertion provider. However at this time none of the "out of the box" identity-assertion providers support an ability to lower case the identity. This would however be very easy to implement and plug in "on site". It would require implementing a custom identity-assertion provider that essentially implements the mapUserPrincial method of org.apache.hadoop.gateway.identityasserter.common.filter.AbstractIdentityAssertionFilter in module gateway-provider-identity-assertion-common. The whole process of writing and hooking up a Knox extension plugin is described in Larry's blog. <A href="http://hortonworks.com/blog/adding-federation-provider-apache-knox/" target="_blank">http://hortonworks.com/blog/adding-federation-provider-apache-knox/</A> This described a federation provider but the overall mechanism is similar. General details about Knox development can be found in the dev guide. <A href="http://knox.apache.org/books/knox-0-6-0/dev-guide.html" target="_blank">http://knox.apache.org/books/knox-0-6-0/dev-guide.html</A></P> Mon, 05 Oct 2015 22:09:16 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/Can-I-also-Lower-Case-User-Names-in-Apache-Knox/m-p/94878#M8148 kevin_minder 2015-10-05T22:09:16Z