tmakinen/puppet
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

ldap: Add better timeouts than infinity to nslcd.conf

Browse source
This commit is contained in:
Ossi Salmi 2014-06-27 15:01:39 +03:00
parent 5b0985fb1f
commit 5ac54d2870
1 changed files with 5 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
ldap/templates/nslcd.conf.erb
View file

@ -8,6 +8,11 @@ gid ldap
uri <%= @ldap_uri %> uri <%= @ldap_uri %>
base <%= @ldap_basedn %> base <%= @ldap_basedn %>
# time out searches after 30 seconds
timelimit 30
# close idle connections after 10 minutes
idle_timelimit 600
<% if ['ad','activedirectory'].index(@mapping) -%> <% if ['ad','activedirectory'].index(@mapping) -%>
pagesize 1000 pagesize 1000
filter passwd (&(objectClass=user)(!(objectClass=computer))(uidNumber=*)) filter passwd (&(objectClass=user)(!(objectClass=computer))(uidNumber=*))