This is an automated email from the ASF dual-hosted git repository.

starocean999 pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/doris.git


The following commit(s) were added to refs/heads/master by this push:
     new 1e9e513b318 [enhance](auth)modify ldap default config (#54105)
1e9e513b318 is described below

commit 1e9e513b3188797688b3c5dc072c0e33bceca85d
Author: zhangdong <[email protected]>
AuthorDate: Thu Aug 14 09:43:06 2025 +0800

    [enhance](auth)modify ldap default config (#54105)
    
    Some configurations default to false, which can cause certain bad
    connections in the connection pool to persist indefinitely.
---
 conf/ldap.conf                                                    | 8 ++++----
 .../src/main/java/org/apache/doris/common/LdapConfig.java         | 8 ++++----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/conf/ldap.conf b/conf/ldap.conf
index b501a729d7e..deb1a06a1d0 100644
--- a/conf/ldap.conf
+++ b/conf/ldap.conf
@@ -42,7 +42,7 @@ ldap_user_basedn = ou=people,dc=domain,dc=com
 ldap_user_filter = (&(uid={login}))
 ldap_group_basedn = ou=group,dc=domain,dc=com
 
-# ldap_cache_time_out_s = 12 * 60 * 60;
+# ldap_user_cache_timeout_s = 5 * 60;
 
 # LDAP pool configuration
 # 
https://docs.spring.io/spring-ldap/docs/2.3.3.RELEASE/reference/#pool-configuration
@@ -52,6 +52,6 @@ ldap_group_basedn = ou=group,dc=domain,dc=com
 # ldap_pool_min_idle = 0
 # ldap_pool_max_wait = -1
 # ldap_pool_when_exhausted = 1
-# ldap_pool_test_on_borrow = false
-# ldap_pool_test_on_return = false
-# ldap_pool_test_while_idle = false
+# ldap_pool_test_on_borrow = true
+# ldap_pool_test_on_return = true
+# ldap_pool_test_while_idle = true
diff --git a/fe/fe-common/src/main/java/org/apache/doris/common/LdapConfig.java 
b/fe/fe-common/src/main/java/org/apache/doris/common/LdapConfig.java
index f174a4ef663..9499fcc2a1b 100644
--- a/fe/fe-common/src/main/java/org/apache/doris/common/LdapConfig.java
+++ b/fe/fe-common/src/main/java/org/apache/doris/common/LdapConfig.java
@@ -77,7 +77,7 @@ public class LdapConfig extends ConfigBase {
      * After timeout, the user information will be retrieved from the LDAP 
service again.
      */
     @ConfigBase.ConfField(mutable = true)
-    public static long ldap_user_cache_timeout_s = 12 * 60 * 60;
+    public static long ldap_user_cache_timeout_s = 5 * 60;
 
     /**
      * System LDAP information cache time.
@@ -143,18 +143,18 @@ public class LdapConfig extends ConfigBase {
      * it is dropped from the pool, and an attempt to borrow another is made.
      */
     @ConfigBase.ConfField
-    public static boolean ldap_pool_test_on_borrow = false;
+    public static boolean ldap_pool_test_on_borrow = true;
 
     /**
      * Whether objects are validated before being returned to the pool.
      */
     @ConfigBase.ConfField
-    public static boolean ldap_pool_test_on_return = false;
+    public static boolean ldap_pool_test_on_return = true;
 
     /**
      * Whether objects are validated by the idle object evictor (if any). If 
an object fails to validate,
      * it is dropped from the pool.
      */
     @ConfigBase.ConfField
-    public static boolean ldap_pool_test_while_idle = false;
+    public static boolean ldap_pool_test_while_idle = true;
 }


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to