[HADOOP-9322] LdapGroupsMapping doesn't seem to set a timeout for its directory search

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.0.3-alpha
• Fix Version/s: 2.1.0-beta
• Component/s: security
• Labels: performance
• Hadoop Flags: Reviewed
• Tags: ldap, groups
• Assignee: Harsh J
• Reporter: Harsh J
• Created: 21/Feb/13 16:59
• Updated: 27/Aug/13 22:06
• Resolved: 30/Apr/13 03:07

Description

We don't appear to be setting a timeout via http://docs.oracle.com/javase/6/docs/api/javax/naming/directory/SearchControls.html#setTimeLimit(int) before we search with http://docs.oracle.com/javase/6/docs/api/javax/naming/directory/DirContext.html#search(javax.naming.Name,%20java.lang.String,%20javax.naming.directory.SearchControls).

This may occasionally lead to some unwanted NN pauses due to lock-holding on the operations that do group lookups. A timeout is better to define than rely on "0" (infinite wait).