[ 
https://issues.apache.org/jira/browse/KNOX-468?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Kevin Minder updated KNOX-468:
------------------------------
    Description: 
The config below needs to be added to the Shiro provider in order to prevent 
LDAP group lookup every request.
{code}
cacheManager = org.apache.shiro.cache.MemoryConstrainedCacheManager
securityManager.cacheManager = $cacheManager
{code}

{code:xml}
<topology>
    <gateway>
        <provider>
            <role>authentication</role>
            <name>ShiroProvider</name>
            ...
            <param>
                <name>main.cacheManager</name>
                
<value>org.apache.shiro.cache.MemoryConstrainedCacheManager</value>
            </param>
            <param>
                <name>main.securityManager.cacheManager</name>
                <value>$cacheManager</value>
            </param>
            ....
        </provider>
        ....
    </gateway>
    ...
</topology>

{code}

  was:
The config below needs to be added to the Shiro provider in order to prevent 
LDAP group lookup every request.
{code}
cacheManager = org.apache.shiro.cache.MemoryConstrainedCacheManager
securityManager.cacheManager = $cacheManager
{code}

{code:xml}
<?xml version="1.0" encoding="utf-8"?>
<topology>
    <gateway>
        <provider>
            <role>authentication</role>
            <name>ShiroProvider</name>
            ...
            <param>
                <name>main.cacheManager</name>
                
<value>org.apache.shiro.cache.MemoryConstrainedCacheManager</value>
            </param>
            <param>
                <name>main.securityManager.cacheManager</name>
                <value>$cacheManager</value>
            </param>
            ....
        </provider>
        ....
    </gateway>
    ...
</topology>

{code}


> Add default config to optimize LDAP group lookup
> ------------------------------------------------
>
>                 Key: KNOX-468
>                 URL: https://issues.apache.org/jira/browse/KNOX-468
>             Project: Apache Knox
>          Issue Type: Bug
>          Components: Server
>    Affects Versions: 0.5.0
>            Reporter: Kevin Minder
>            Priority: Critical
>             Fix For: 0.6.0
>
>
> The config below needs to be added to the Shiro provider in order to prevent 
> LDAP group lookup every request.
> {code}
> cacheManager = org.apache.shiro.cache.MemoryConstrainedCacheManager
> securityManager.cacheManager = $cacheManager
> {code}
> {code:xml}
> <topology>
>     <gateway>
>         <provider>
>             <role>authentication</role>
>             <name>ShiroProvider</name>
>             ...
>             <param>
>                 <name>main.cacheManager</name>
>                 
> <value>org.apache.shiro.cache.MemoryConstrainedCacheManager</value>
>           </param>
>             <param>
>                 <name>main.securityManager.cacheManager</name>
>                 <value>$cacheManager</value>
>             </param>
>             ....
>         </provider>
>         ....
>     </gateway>
>     ...
> </topology>
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to