[ 
https://issues.apache.org/jira/browse/HADOOP-13105?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15293915#comment-15293915
 ] 

Chris Nauroth commented on HADOOP-13105:
----------------------------------------

[~liuml07], do you think hadoop-minikdc is helpful at all for testing a read 
timeout?  Maybe there is a way to subclass something in there to stick a wait 
time inside the query handling?

If the test gets too cumbersome or brittle, then I'd be comfortable proceeding 
with a patch that tests only connection timeout.  The JNDI documentation 
clearly spells out how to set both connection and read timeout.  Maybe it's 
more pragmatic to verify read timeout through code review and cross-check 
against that documentation.

> Support timeouts in LDAP queries in LdapGroupsMapping.
> ------------------------------------------------------
>
>                 Key: HADOOP-13105
>                 URL: https://issues.apache.org/jira/browse/HADOOP-13105
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: security
>            Reporter: Chris Nauroth
>            Assignee: Mingliang Liu
>         Attachments: HADOOP-13105.000.patch
>
>
> {{LdapGroupsMapping}} currently does not set timeouts on the LDAP queries.  
> This can create a risk of a very long/infinite wait on a connection.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-issues-h...@hadoop.apache.org

Reply via email to