[SSSD] [PATCH] Add sdap_connection_expire_timeout option

Stephen Gallagher sgallagh at redhat.com
Fri Dec 9 18:33:20 UTC 2011


Fixes https://fedorahosted.org/sssd/ticket/1036

We need to make sure that SSSD doesn't hold on to connections until the
LDAP server issues an idle disconnect. With this patch, we set the
default time that we'll maintain a connection to be 15 minutes. After
that, the connection will be released and SSSD will need to recreate it.

This code takes advantage of the code we had in place for SASL/GSSAPI,
to ensure that we didn't maintain an LDAP connection beyond the lifetime
of the TGT. So all this patch does is set the same expiration value
(checking for the presence of the SASL/GSSAPI-set version and using the
sooner of the two).
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Add-sdap_connection_expire_timeout-option.patch
Type: text/x-patch
Size: 8172 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20111209/94c1e779/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20111209/94c1e779/attachment.sig>


More information about the sssd-devel mailing list