cockroachdb / cockroachdb/cockroach
ldap: allow using a cache for authentication and authorization
Open
A-authentication
A-security
C-enhancement
P-3
T-product-security
- Dominant language
- Go
- Stars
- 32.5k
- Forks
- 4.1k
- PR merge metrics
- PR metrics pending
Description
We currently have a cache that is used for authentication. We should extend this to also work with LDAP authentication.
We currently have a cache that is used for authentication. We should extend this to also work with LDAP authentication. Since the current cache only caches role options, we should investigate extending this cache or adding another cache for authorization. We should also have settings to control the cache TTL eg:
```
SET CLUSTER SETTING server.authentication_cache.time_to_live= '10m'
SET CLUSTER SETTING server.authorization_cache.time_to_live = '10m';
```
Jira issue: CRDB-39236
Epic CRDB-54682
Contributor guide
Assessment
This issue has not been assessed yet.