[HADOOP-13105] Support timeouts in LDAP queries in LdapGroupsMapping.

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.8.0, 3.0.0-alpha1, 2.7.6
• Component/s: security
• Target Version/s: 2.8.0
• Hadoop Flags: Reviewed

Release Note

This patch adds two new config keys for supporting timeouts in LDAP query operations. The property "hadoop.security.group.mapping.ldap.connection.timeout.ms" is the connection timeout (in milliseconds), within which period if the LDAP provider doesn't establish a connection, it will abort the connect attempt. The property "hadoop.security.group.mapping.ldap.read.timeout.ms" is the read timeout (in milliseconds), within which period if the LDAP provider doesn't get a LDAP response, it will abort the read attempt.

• Assignee: Mingliang Liu
• Reporter: Chris Nauroth
• Created: 05/May/16 19:40
• Updated: 02/Oct/19 17:15
• Resolved: 03/Jun/16 23:47

Description

LdapGroupsMapping currently does not set timeouts on the LDAP queries. This can create a risk of a very long/infinite wait on a connection.

Issue Links

• depends upon: HADOOP-12472 Make GenericTestUtils.assertExceptionContains robust