[
https://issues.apache.org/jira/browse/HADOOP-13105?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15293915#comment-15293915
]
Chris Nauroth commented on HADOOP-13105:
----------------------------------------
[~liuml07], do you think hadoop-minikdc is helpful at all for testing a read
timeout? Maybe there is a way to subclass something in there to stick a wait
time inside the query handling?
If the test gets too cumbersome or brittle, then I'd be comfortable proceeding
with a patch that tests only connection timeout. The JNDI documentation
clearly spells out how to set both connection and read timeout. Maybe it's
more pragmatic to verify read timeout through code review and cross-check
against that documentation.
> Support timeouts in LDAP queries in LdapGroupsMapping.
> ------------------------------------------------------
>
> Key: HADOOP-13105
> URL: https://issues.apache.org/jira/browse/HADOOP-13105
> Project: Hadoop Common
> Issue Type: Improvement
> Components: security
> Reporter: Chris Nauroth
> Assignee: Mingliang Liu
> Attachments: HADOOP-13105.000.patch
>
>
> {{LdapGroupsMapping}} currently does not set timeouts on the LDAP queries.
> This can create a risk of a very long/infinite wait on a connection.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
