You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@maven.apache.org by "Emilio Jose Mena Cebrian (JIRA)" <ji...@codehaus.org> on 2007/12/11 11:01:57 UTC

[jira] Created: (MRM-625) LDAP authentication leaks connections

LDAP authentication leaks connections
-------------------------------------

                 Key: MRM-625
                 URL: http://jira.codehaus.org/browse/MRM-625
             Project: Archiva
          Issue Type: Bug
          Components: Users/Security
    Affects Versions: 1.0-beta-4
         Environment: Archiva 1.0-beta-4, OpenLdap
            Reporter: Emilio Jose Mena Cebrian
            Priority: Minor


I've configured redback to authenticate from a LDAP with cached used manager and I've detected it's leaking connections.

Connections from web interface seem to be returned to LdapContext pool , 
but connection from repository servlet are leaked.

The LdapCtx Configuration is :

    <component>
      <role>org.codehaus.plexus.redback.common.ldap.connection.LdapConnectionFactory</role>
      <role-hint>configurable</role-hint>
      <implementation>org.codehaus.plexus.redback.common.ldap.connection.ConfigurableLdapConnectionFactory</implementation>
      <description></description>
      <configuration>
        <hostname>localhost</hostname>
        <port>389</port>
        <baseDn>************</baseDn>
        <contextFactory>com.sun.jndi.ldap.LdapCtxFactory</contextFactory>
        <password>*******</password>
        <bindDn>********</bindDn>
        <extraProperties>
                <property>
                        <name>com.sun.jndi.ldap.connect.pool</name>
                        <value>true</value>
                </property>
                <property>
                        <name>com.sun.jndi.ldap.connect.pool.maxsize</name>
                        <value>20</value>
                </property>
                <property>
                        <name>com.sun.jndi.ldap.connect.pool.prefsize</name>
                        <value>10</value>
                </property>
                <property>
                        <name>com.sun.jndi.ldap.connect.pool.timeout</name>
                        <value>30000</value>
                </property>
        </extraProperties>
      </configuration>
    </component>

NOTE: sensible configuration tags are correctly configured, but i'm erased them (marked with *****)

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira