Skip to content

Conversation

kpetremann
Copy link
Member

@kpetremann kpetremann commented Aug 21, 2023

Fix two LDAP issues:

  • unable to authenticate concurrent requests
  • no reconnect after the TCP/LDAP timed out
  • timeout if the LDAP is not responding to authentication requests

In some cases like network connectivity lost, the LDAP bind request is
waiting indefinetely.

To avoid that, we to a timeout on the LDAP request by closing the
LDAP connection.
@kpetremann kpetremann force-pushed the ldap_fix branch 2 times, most recently from 21d35dc to 668cd94 Compare August 24, 2023 15:47
Max connection lifetime is the maximum time a LDAP connection will be
re-used for authentication requests. Default is 1 minute.

This is not a guarantee:
- the LDAP could close the connection
- the TCP connection could be closed (timeout if the max connection
  lifetime is too high, issues etc...)
@kpetremann kpetremann dismissed SergeShpak’s stale review September 21, 2023 10:03

all has been fixed

@kpetremann kpetremann merged commit b233912 into criteo:main Sep 21, 2023
@kpetremann kpetremann deleted the ldap_fix branch September 21, 2023 10:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants