honeymoose
/
OpenSearch
mirror of https://github.com/honeymoose/OpenSearch.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
OpenSearch/x-pack/plugin/security/forbidden/ldap-signatures.txt

6 lines
537 B
Plaintext
Raw Normal View History

Fix LDAP Authc connections deadlock (elastic/x-pack-elasticsearch#2587) Do not execute bind on on the LDAP reader thread Each LDAP connection has a single associated thread, executing the handlers for async requests; this is managed by the LDAP library. The bind operation is blocking for the connection. It is a deadlock to call bind, if on the LDAP reader thread for the same connection, because waiting for the bind response blocks the thread processing responses (for this connection). This will execute the bind operation (and the subsequent runnable) on a thread pool after checking for the conflict above. Closes: elastic/x-pack-elasticsearch#2570, elastic/x-pack-elasticsearch#2620 Original commit: elastic/x-pack-elasticsearch@404a3d873782c590a9043ae08c45db0b463968cd
2017-10-09 06:06:12 -04:00
@defaultMessage Bind operation is blocking and can lead to deadlocks if called inside LDAP Response handlers. Use LdapUtils methods.
com.unboundid.ldap.sdk.LDAPConnection#bind(com.unboundid.ldap.sdk.BindRequest)
com.unboundid.ldap.sdk.LDAPConnection#bind(java.lang.String, java.lang.String)
com.unboundid.ldap.sdk.LDAPConnectionPool#bindAndRevertAuthentication(com.unboundid.ldap.sdk.BindRequest)
com.unboundid.ldap.sdk.LDAPConnectionPool#bindAndRevertAuthentication(java.lang.String, java.lang.String, com.unboundid.ldap.sdk.Control[])