In cloudera doc http://www.cloudera.com/content/cloudera-content/cloudera-docs/Impala/latest/Installing-and-Using-Impala/ciiu_authorization.html ,nothing has been mentioned about where to place the open ldap's configuration like base dn which is required for connecting the ldap server unlike hive sentry setup with ldap.   I have tried to add the base dn in -ldap_uri as "-ldap_uri=ldap://a.b.com:111/<base dn>". But this resulted in INVALID DN in the tcpdump output.   Found hadoop.security.group.mapping.ldap.search.*  properties in http://datanode:25000/varz which is set as default . It is being picked from core-site.xml. Tried changing to in Cloudera manager in HDFS service and deployed the configuration but it stills shows the default values.   Please help!   Thanks ... View more