[SSSD] [PATCHES] Fix LDAP timeout values

Stephen Gallagher sgallagh at redhat.com
Tue May 18 16:16:17 UTC 2010


On 05/18/2010 12:14 PM, Dmitri Pal wrote:
> Stephen Gallagher wrote:
>> On 05/18/2010 11:03 AM, Stephen Gallagher wrote:
>>>>>> Patch 0002: The manpage lists five seconds as the default for ldap
>>>>>> searches, but the source was setting the default to 60s. This was
>>>>>> causing long timeouts waiting to go offline.
>>
>> Simo noted off-list that the ldap_search_timeout value also controls
>> the timeout for enumerations. The attached patches now sets the
>> timeout to a minimum of 30s when enumerate=True is set in the config
>> file.
>>
>
> If this is the case we should decouple the timeouts because the
> expectation is different.
> I suggest we have a separate value of the ldap_enumeration_timout that
> is used with the enumerations and default it to 30 while the
> ldap_search_timeout will be remain 5 seconds. IMO 5 seconds is too high
> for the simple search too. I would have it more like 2 seconds.

That's the long-term plan, but it's too deeply-ingrained to do that in 
the 1.2 timeframe. If you look at the comments in the patch, I address this.

And two seconds is too short. 5s is sane.


-- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/



More information about the sssd-devel mailing list