[SSSD] [PATCH] Add sdap_connection_expire_timeout option

Jakub Hrozek jhrozek at redhat.com
Mon Dec 12 11:44:41 UTC 2011


On Fri, Dec 09, 2011 at 01:33:20PM -0500, Stephen Gallagher wrote:
> Fixes https://fedorahosted.org/sssd/ticket/1036
> 
> We need to make sure that SSSD doesn't hold on to connections until the
> LDAP server issues an idle disconnect. With this patch, we set the
> default time that we'll maintain a connection to be 15 minutes. After
> that, the connection will be released and SSSD will need to recreate it.
> 
> This code takes advantage of the code we had in place for SASL/GSSAPI,
> to ensure that we didn't maintain an LDAP connection beyond the lifetime
> of the TGT. So all this patch does is set the same expiration value
> (checking for the presence of the SASL/GSSAPI-set version and using the
> sooner of the two).

Ack



More information about the sssd-devel mailing list