diff options
| author | Fabiano Fidêncio <fidencio@redhat.com> | 2016-11-22 15:02:33 +0100 |
|---|---|---|
| committer | Lukas Slebodnik <lslebodn@redhat.com> | 2017-01-23 18:46:37 +0100 |
| commit | 151a6de4793e0045a7085d4d72b975947662e566 (patch) | |
| tree | 5082d9cb1c9b40ca9148672865c59fefa36cad75 /src/config/cfg_rules.ini | |
| parent | 32c76642250b3ba3b173d0576c0d00b0190320a9 (diff) | |
| download | sssd-151a6de4793e0045a7085d4d72b975947662e566.tar.gz sssd-151a6de4793e0045a7085d4d72b975947662e566.tar.xz sssd-151a6de4793e0045a7085d4d72b975947662e566.zip | |
RESPONDER: Shutdown {dbus,socket}-activated responders in case they're idle
This commit introduces a new option for the responders called
responder_idle_timeout, which specifies the number of seconds that the
responder process can be up without being used. The default value is
300 seconds (5 minutes) and can be configured per responder, being 60
seconds the minimum acceptable value.
Is important to note that setting "responder_idle_timeout = 0" disables
the responder timeout, which makes sense for the responders that always
will be running.
The shutdown timeout is activated per responder in case the responder
has been {dbus,socket}-activated. In case of any commnunication with the
responder the timeout is reset thereby ensuring we won't shutdown a
responder that is not idle.
Setting the responder's last request time is done slightly differently
for socket-activated and dbus-activated responders. In both cases it's
updated in any internal communication in sbus_message_handler(), but
for the socket-activated responders it's also updated when the
responder's socket is used.
Currently it works properly with all responders but the secrets one,
which has a different logic and must be treated separately in case some
change is required there.
Is worth to mention that this commit does not affect the responders
explicitly configured in the "services" line of sssd.conf.
Related:
https://fedorahosted.org/sssd/ticket/3245
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>
Diffstat (limited to 'src/config/cfg_rules.ini')
| -rw-r--r-- | src/config/cfg_rules.ini | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/src/config/cfg_rules.ini b/src/config/cfg_rules.ini index ec44bffdf..51981c3d0 100644 --- a/src/config/cfg_rules.ini +++ b/src/config/cfg_rules.ini @@ -57,6 +57,7 @@ option = reconnection_retries option = fd_limit option = client_idle_timeout option = description +option = responder_idle_timeout # Name service option = user_attributes @@ -94,6 +95,7 @@ option = reconnection_retries option = fd_limit option = client_idle_timeout option = description +option = responder_idle_timeout # Authentication service option = offline_credentials_expiration @@ -127,6 +129,7 @@ option = reconnection_retries option = fd_limit option = client_idle_timeout option = description +option = responder_idle_timeout # sudo service option = sudo_timed @@ -147,6 +150,7 @@ option = reconnection_retries option = fd_limit option = client_idle_timeout option = description +option = responder_idle_timeout # autofs service option = autofs_negative_timeout @@ -166,6 +170,7 @@ option = reconnection_retries option = fd_limit option = client_idle_timeout option = description +option = responder_idle_timeout # ssh service option = ssh_hash_known_hosts @@ -187,6 +192,7 @@ option = reconnection_retries option = fd_limit option = client_idle_timeout option = description +option = responder_idle_timeout # PAC responder option = allowed_uids @@ -207,6 +213,7 @@ option = reconnection_retries option = fd_limit option = client_idle_timeout option = description +option = responder_idle_timeout # InfoPipe responder option = allowed_uids |