Uploaded image for project: 'OpenNMS'
  1. OpenNMS
  2. NMS-6148

LdapMonitor can leak poller threads

    Details

    • Type: Bug
    • Status: Closed (View Workflow)
    • Priority: Blocker
    • Resolution: Fixed
    • Affects Version/s: 1.12.1, 1.13.0
    • Fix Version/s: 1.12.2, 1.13.0
    • Security Level: Default (Default Security Scheme)
    • Labels:
    • Environment:
      Any system with the LDAP (or LDAPS) poller monitor installed and configured

      Description

      The LDAPConnection search method (Novell library) that this monitor uses does not provide a way to limit how long we will wait for the search to complete on the server. This is bad because it enables a badly-behaved LDAP server to cause the poller to leak threads.

      Issue reported by support customer under ticket https://mynms.opennms.com/Ticket/Display.html?id=2513

      We should be using the search method which takes an instance of LDAPSearchConstraints to set both a local timeout (probably equal to "timeout" parameter) to avoid the thread leak and a server-side time limit (whole seconds; round up our timeout to the next second?) for the sake of politeness.

        Attachments

          Activity

            People

            • Assignee:
              jeffg Jeff Gehlbach
              Reporter:
              jeffg Jeff Gehlbach
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: