[SSSD] Eliminate delayed sdap_handle destruction after fail-over retry.

Stephen Gallagher sgallagh at redhat.com
Thu Jul 8 13:41:49 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 07/02/2010 11:15 AM, Eugene Indenbom wrote:
> The patch attached addresses the following issue:
> 
> Prerequisites:
> 1. One or more fail-over server is configured;
> 2. The first server to try can be resolved but LDAP service is down;
> 3. There is at least one operational LDAP server configured;
> 
> Synopsis:
> 1. sdap_async_connection.c tries to connect to first resolved host and
> creates sdap_handle;
> 2. After connection to dead LDAP service is failed it tries next server
> in fail-over sequence;
> 3. sdap_handle to from step 1 is leaked and is destroyed only when all
> connection retries fail or connection is established;
> 4. sdap_handle from step 1 may have open file descriptors.
> 
> Fix:
> The patch attached makes sure that sdap_handle from failed connection
> attempt is destroyed before next connection attempt is started.
> 

Ack.

- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkw11Z0ACgkQeiVVYja6o6O8KQCgqZybJhemNQyad0+JpYn52/Kt
+H8AoJTupCOiVtgr6NtCIoKmEutjVGvM
=UbwX
-----END PGP SIGNATURE-----



More information about the sssd-devel mailing list