Skip to content

Do not cache realm lookup failure for transient LDAP connection issues#301

Open
pavelhoral wants to merge 1 commit into
WrenSecurity:mainfrom
pavelhoral:fix-realm-lookup
Open

Do not cache realm lookup failure for transient LDAP connection issues#301
pavelhoral wants to merge 1 commit into
WrenSecurity:mainfrom
pavelhoral:fix-realm-lookup

Conversation

@pavelhoral
Copy link
Copy Markdown
Member

When the config store is down during realm lookup, the failed lookup attempt gets cached and is never retried (unless the configuration changes). This PR introduces new SMS exception that allows for the code to distinguish when the underlying exception is not related to the request itself.

Btw. I thought about fixing this in a different way -> firing config-changed event when the persistent search is established with the config store, which will force CachingRealmLookup to drop cached responses, but it felt a bit more complex with much more potential side effects.

@pavelhoral
Copy link
Copy Markdown
Member Author

pavelhoral commented May 30, 2026

My change only fixes when the connection can not be established, not when the connection gets dropped. I that case needs to be added as well.

I think this PR is good enough fix to get merged. Fixing the data layer would mean much bigger change.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant