[SSSD] [PATCH] Add sdap_connection_expire_timeout option

Stephen Gallagher sgallagh at redhat.com
Mon Dec 12 12:49:45 UTC 2011


On Mon, 2011-12-12 at 12:44 +0100, Jakub Hrozek wrote:
> On Fri, Dec 09, 2011 at 01:33:20PM -0500, Stephen Gallagher wrote:
> > Fixes https://fedorahosted.org/sssd/ticket/1036
> > 
> > We need to make sure that SSSD doesn't hold on to connections until the
> > LDAP server issues an idle disconnect. With this patch, we set the
> > default time that we'll maintain a connection to be 15 minutes. After
> > that, the connection will be released and SSSD will need to recreate it.
> > 
> > This code takes advantage of the code we had in place for SASL/GSSAPI,
> > to ensure that we didn't maintain an LDAP connection beyond the lifetime
> > of the TGT. So all this patch does is set the same expiration value
> > (checking for the presence of the SASL/GSSAPI-set version and using the
> > sooner of the two).
> 
> Ack


Pushed to master.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20111212/adf777df/attachment.sig>


More information about the sssd-devel mailing list