trustchain-oc1-orchestral/authentik
Archived
10
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

sources/ldap: make task timeout adjustable

Browse source 
closes #4375

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
This commit is contained in:
Jens Langhammer 2023-01-06 12:37:59 +01:00
parent c63ba3f378
commit bec538c543
No known key found for this signature in database
3 changed files with 17 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
authentik/lib/default.yml
View file

@ -64,6 +64,7 @@ outposts:
disable_embedded_outpost: false disable_embedded_outpost: false
ldap: ldap:
task_timeout_hours: 2
tls: tls:
ciphers: null ciphers: null

8
authentik/sources/ldap/tasks.py
View file

@ -3,6 +3,7 @@ from ldap3.core.exceptions import LDAPException
from structlog.stdlib import get_logger from structlog.stdlib import get_logger
from authentik.events.monitored_tasks import MonitoredTask, TaskResult, TaskResultStatus from authentik.events.monitored_tasks import MonitoredTask, TaskResult, TaskResultStatus
from authentik.lib.config import CONFIG
from authentik.lib.utils.errors import exception_to_string from authentik.lib.utils.errors import exception_to_string
from authentik.lib.utils.reflection import class_to_path, path_to_class from authentik.lib.utils.reflection import class_to_path, path_to_class
from authentik.root.celery import CELERY_APP from authentik.root.celery import CELERY_APP
@ -27,11 +28,14 @@ def ldap_sync_all():
@CELERY_APP.task( @CELERY_APP.task(
bind=True, base=MonitoredTask, soft_time_limit=60 * 60 * 2, task_time_limit=60 * 60 * 2 bind=True,
base=MonitoredTask,
soft_time_limit=60 * 60 * int(CONFIG.y("ldap.task_timeout_hours")),
task_time_limit=60 * 60 * int(CONFIG.y("ldap.task_timeout_hours")),
) )
def ldap_sync(self: MonitoredTask, source_pk: str, sync_class: str): def ldap_sync(self: MonitoredTask, source_pk: str, sync_class: str):
"""Synchronization of an LDAP Source""" """Synchronization of an LDAP Source"""
self.result_timeout_hours = 2 self.result_timeout_hours = int(CONFIG.y("ldap.task_timeout_hours"))
try: try:
source: LDAPSource = LDAPSource.objects.get(pk=source_pk) source: LDAPSource = LDAPSource.objects.get(pk=source_pk)
except LDAPSource.DoesNotExist: except LDAPSource.DoesNotExist:

10
website/docs/installation/configuration.md
View file

@ -252,6 +252,16 @@ The setting can be used as follows:
AUTHENTIK_FOOTER_LINKS='[{"name": "Link Name","href":"https://goauthentik.io"}]' AUTHENTIK_FOOTER_LINKS='[{"name": "Link Name","href":"https://goauthentik.io"}]'
``` ```
### `AUTHENTIK_LDAP__TLS__TASK_TIMEOUT_HOURS`
:::info
Requires authentik 2023.1
:::
Timeout in hours for LDAP synchronization tasks.
Defaults to `2`.
### `AUTHENTIK_LDAP__TLS__CIPHERS` ### `AUTHENTIK_LDAP__TLS__CIPHERS`
:::info :::info