[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Re: Changing timeouts from a slapd module
- To: dee heffem <dheffem@gmail.com>
- Subject: Re: Changing timeouts from a slapd module
- From: Michael Ströder <michael@stroeder.com>
- Date: Tue, 21 May 2019 23:31:25 +0200
- Autocrypt: addr=michael@stroeder.com; prefer-encrypt=mutual; keydata= mQENBFbdnRoBCADj0vYA4aRwKJ6AE4mf8oElLgMT/1eLNKpJ2FYBWcwj9d8dTk5/p9b8DRxy S/qQIUUZqt9xRFZwUCm0vFeQMRDeN9xzAKoRzrJifoDOacOjG1lhZTKYvVZGgUT89Ao3QeHh Q7gPzcAKNoueoR2y3FXStOYuRrbk5PlSjVAITjsotgc7PWE9mmVYpeu8a+byK/DBHKUyolOA 1UXYvDa7MbPhMtdNm8qnwtKs1Vsyk1VkErM+5cIe+zTT6WYQcmZMRjCtWGiFTzk9W6Mdlskk WRTKhKNgokTsgcy1ecaCBUZWxv/SyXgD81+rwRi9b8Px+1reg43ayxi8sV7jrI1feybbABEB AAG0J01pY2hhZWwgU3Ryw7ZkZXIgPG1pY2hhZWxAc3Ryb2VkZXIuY29tPokBNwQTAQgAIQUC Vt2dGgIbAwULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgAAKCRAH3HrjaovJOFpTCACjO773gcmJ KvzjiNpUFl/gANyaJgIq4VbMQ7VthRb1F9X6YbdJ6Z99ntyESjGFCpjofcSomr2vJDpv6ht+ lY33yo20YwsMpqe2OeId0jPybG+FtabKjgBNoAk7iqnBGUvE4t0dz0n1LQVCQR2jxyTKmcNq OYpsRZ3H+6kWwJMuVgsNZglINVZ8JgV5QuLYN5jhYz+pOuFnU11bV6nWREvzZXzebe7g7Zus 6AsWjtJ0lDvgBNzLlF3/eFrVch6Bejs0SvuFseIdZQk+4YU6Rb8xul/jDFXIfo7eTmijO3dV T5AmC1cUi8czncwpgAJnEH8vYv23RoN/aw2gSMCS2huIuQENBFbdnRoBCAC7L1cTVBVZZuM/ yxSUM5CsgGBlTD1Cr7C2ngZFsHSYXVLq6NUB8GZA2iLK96CrwnFw4/Jjz4llOjc50iVRMQKL RyFWOJAMrpPq2ew5T+Uoo524D//dwVbqkFVVuvM8NPiKIDyPGCjP+acM1D8hXwhOXgQ8Iz8Q 3/GRSYjitn9JrkF0ia2nhariznBKVu0LDffxF/hOCx45+QRR2/rYYlshfZMB7nEJX9P+hVfM CSzltz9Z8CldeUbiJvnyrISReR2XBw9oh8JkIUP0BtpIaify9A7EfzOk+W9BUnWe+YwdSUsB fJxOhSv+umyW5GMqZGFu+4oYnkzbe+1LUs1JarCtABEBAAGJAR8EGAEIAAkFAlbdnRoCGwwA CgkQB9x642qLyTjEUgf+JX6Atatl/QKe37yCj1OZYNPd3B0rPLJRF5mEmrADRXLZC9+uFeDS Wxxln040gnR6rjBHrRcvVmlTDiZY26iuL16+V+0/aZ9uyXNQSzk2cwDSiI/8gvr72Y+FN5fh cGXpeNHxHilYc9onzDhxyE76cwzqTKm4q2ULIH2u9IHQ5O86Fv6nHPYhe2fy1bhQapNwi/Xl 3G3i2WNH/w7m+1zWU1IddZOjmXzoxLT1BATwXGa0Tt5RjVb2mM1Wg3Zj6kqFkF2vvKcvrwj0 q0Ap5uyfN5m0uWzQMCMoaV9HQf7f5MkS1lnwBqDgnojjVAieX5uk7olUiRuPKHMfhvXulYP8 AA==
- Cc: OpenLDAP Technical <openldap-technical@openldap.org>
- Content-language: en-US
- In-reply-to: <bc09ac9b-4d64-e445-eda3-1a95cd30871c@gmail.com>
- Openpgp: id=43C8730E84A20E560722806C07DC7AE36A8BC938
- References: <CAM-t1EaWZ1mmzbtyV-XRxtmyk=6kRbsdYzC7WFLBZv5=F7XBhQ@mail.gmail.com> <87ef51x91g.fsf@pink.fritz.box> <3F66A84DB9D8E99EF5A5825C@192.168.1.39> <CAM-t1EbApGTcNpd6bHSFQEU91OQFDYO0J2UzDSX7RnyMGDPUQg@mail.gmail.com> <87k1esyscr.fsf@pink.fritz.box> <CAM-t1Eak3b+3jB2NTagSVc-JPvW0exqJRZFhkmQ++49AEZ5Q6A@mail.gmail.com> <2B13C8F70A0C725107F0641B@192.168.1.39> <CAM-t1EZYcqYCiNdphAQ23kaMP_wgsyjt0SF=cuwWmaj4SMqjwA@mail.gmail.com> <01A83D0402E9486565385086@[192.168.1.39]> <bc09ac9b-4d64-e445-eda3-1a95cd30871c@gmail.com>
- User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.6.1
On 5/21/19 4:12 PM, dee heffem wrote:
> I'm calling a 3rd party 2FA API from within a password module in
> OpenLDAP. The 2FA API call sends an SMS push to a mobile device.
>
> If the push does not return a result within 10 seconds, auth
> fails with what looks like a socket (tls_read) timeout[1]. What is going
> on there and can this timeout be increased if that's what this is?
>
> 60 seconds would be more user friendly but after some experimentation
> with ldap_set_option() I've not been able to affect the connection
> timeout -- if that's what it is.
Is your overlay processing a single bind operation?
AFAIK the slapd worker thread is blocked for the whole processing time
of a single bind operation. Thus I have some doubts that you want to
implement an auth mechanism with such asynchronous characteristics in an
overlay.
Ciao, Michael.