hadoop-common-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Wei-Chiu Chuang (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HADOOP-13105) Support timeouts in LDAP queries in LdapGroupsMapping.
Date Tue, 10 May 2016 13:10:12 GMT

    [ https://issues.apache.org/jira/browse/HADOOP-13105?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15278056#comment-15278056
] 

Wei-Chiu Chuang commented on HADOOP-13105:
------------------------------------------

Thanks for the patch, [~liuml07].
I think it'll be a good idea to make these two timeout values configurable. Could you also
add these two configurable properties into core-default.xml?

Your point #2 looks reasonable to me. If connection timeout is not set, the connection will
block until the underlying network times out.

Out of curiosty, doesn't the property {{hadoop.security.group.mapping.ldap.directory.search.timeout}}
work for this purpose?

> Support timeouts in LDAP queries in LdapGroupsMapping.
> ------------------------------------------------------
>
>                 Key: HADOOP-13105
>                 URL: https://issues.apache.org/jira/browse/HADOOP-13105
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: security
>            Reporter: Chris Nauroth
>            Assignee: Mingliang Liu
>         Attachments: HADOOP-13105.000.patch
>
>
> {{LdapGroupsMapping}} currently does not set timeouts on the LDAP queries.  This can
create a risk of a very long/infinite wait on a connection.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org


Mime
View raw message