full sync blocks user auth

aservo / ldap-crowd-adapter

An LDAP server that delegates request to Atlassian Crowd

Apache License 2.0

2 stars 3 forks source link

full sync blocks user auth #52

Open mdraheim opened 7 months ago

mdraheim commented 7 months ago

7.2.4 mirrored with pg
kubernetes statefulset with 3 replicas
dblock enabled, bootsync disabled

Problem:

During full sync, user auth seems impossible.

We have about 20k users almost as many groups. Unfortunately, a handful of users have bad creds in automation. Which creates crowd audit log entries for failed login attempts every few seconds. This, in turn, makes the adapter constantly restart full sync until it hits a quiet period in crowd audit log.

mdraheim commented 7 months ago

forgot to mention, similar problem with 7.1 in single-node setup. I had hoped to get around this problem with HA setup