tyler.durden
/
icingaweb2
mirror of https://github.com/Icinga/icingaweb2.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

LdapConnection: Add timeout setting with a useful default value

This commit is contained in:
Markus Frosch 2018-10-16 14:35:50 +02:00
parent b3e0b5d587
commit 3f782460dc
2 changed files with 22 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
application/forms/Config/Resource/LdapResourceForm.php
View File

@ -144,6 +144,17 @@ class LdapResourceForm extends Form
) )
); );
$this->addElement(
'number',
'timeout',
array(
'preserveDefault' => true,
'label' => $this->translate('Timeout'),
'description' => $this->translate('Connection timeout for every LDAP connection'),
'value' => 5 // see LdapConnection::__construct()
)
);
return $this; return $this;
} }
} }

11
library/Icinga/Protocol/Ldap/LdapConnection.php
View File

@ -139,6 +139,13 @@ class LdapConnection implements Selectable, Inspectable
*/ */
protected $root; protected $root;
/**
* LDAP_OPT_NETWORK_TIMEOUT for the LDAP connection
*
* @var int
*/
protected $timeout;
/** /**
* The properties and capabilities of the LDAP server * The properties and capabilities of the LDAP server
* *
@ -179,6 +186,7 @@ class LdapConnection implements Selectable, Inspectable
$this->bindPw = $config->bind_pw; $this->bindPw = $config->bind_pw;
$this->rootDn = $config->root_dn; $this->rootDn = $config->root_dn;
$this->port = $config->get('port', 389); $this->port = $config->get('port', 389);
$this->timeout = $config->get('timeout', 5);
$this->encryption = $config->encryption; $this->encryption = $config->encryption;
if ($this->encryption !== null) { if ($this->encryption !== null) {
@ -1190,6 +1198,9 @@ class LdapConnection implements Selectable, Inspectable
$ds = ldap_connect($hostname, $this->port); $ds = ldap_connect($hostname, $this->port);
// Set a proper timeout for each connection
ldap_set_option($ds, LDAP_OPT_NETWORK_TIMEOUT, $this->timeout);
// Usage of ldap_rename, setting LDAP_OPT_REFERRALS to 0 or using STARTTLS requires LDAPv3. // Usage of ldap_rename, setting LDAP_OPT_REFERRALS to 0 or using STARTTLS requires LDAPv3.
// If this does not work we're probably not in a PHP 5.3+ environment as it is VERY // If this does not work we're probably not in a PHP 5.3+ environment as it is VERY
// unlikely that the server complains about it by itself prior to a bind request // unlikely that the server complains about it by itself prior to a bind request