[Building Sakai] LDAP caching

[Sam Ottenhoff]

   -

   timeToLive

   The maximum number of seconds an element can exist in the cache
   regardless of use. The element expires at this limit and will no longer be
   returned from the cache. The default value is 0, which means no TTL
   eviction takes place (infinite lifetime).
   -

   timeToIdle

   The maximum number of seconds an element can exist in the cache without
   being accessed. The element expires at this limit and will no longer be
   returned from the cache. The default value is 0, which means no TTI
   eviction takes place (infinite lifetime).

http://ehcache.org/documentation/user-guide/configuration


On Fri, Dec 20, 2013 at 2:00 PM, Kusnetz, Jeremy <JKusnetz at apus.edu> wrote:

>  One more question J
>
>
>
> Currently we have this set:
>
> timeToLiveSeconds = 300 timeToIdleSeconds = 300
>
>
>
> What exactly is the timeToIdleSeconds?  In your example we are setting it
> to 0, but currently it’s set to 300 the same as live.  I’m increasing the
> timeToLiveSeconds, should I keep the idle at what I set the live for?  Set
> it to 0, or some other number?
>
>
>
> *From:* Sam Ottenhoff [mailto:ottenhoff at longsight.com]
> *Sent:* Friday, December 20, 2013 1:56 PM
>
> *To:* Kusnetz, Jeremy
> *Cc:* sakai-dev Developers
> *Subject:* Re: [Building Sakai] LDAP caching
>
>
>
>
>
>
>
> On Fri, Dec 20, 2013 at 1:53 PM, Kusnetz, Jeremy <JKusnetz at apus.edu>
> wrote:
>
> Actually I guess what you are saying is I need to set
>
>
>
> I see the timeToLiveSeconds is set to 300:
>
>
>
> [ name = org.sakaiproject.user.api.UserDirectoryService.callCache status =
> STATUS_ALIVE eternal = false overflowToDisk = false maxEntriesLocalHeap =
> 10000 maxEntriesLocalDisk = 0 memoryStoreEvictionPolicy = LRU
> timeToLiveSeconds = 300 timeToIdleSeconds = 300 diskPersistent = false
> diskExpiryThreadIntervalSeconds = 120 cacheEventListeners:
> net.sf.ehcache.statistics.LiveCacheStatisticsWrapper hitCount = 459530
> memoryStoreHitCount = 459530 diskStoreHitCount = 0 missCountNotFound =
> 22147 missCountExpired = 10295 maxBytesLocalHeap = 0 overflowToOffHeap =
> false maxBytesLocalOffHeap = 0 maxBytesLocalDisk = 0 pinned = false ]
>
>
>
> So I would add this to sakai.properties?
>
>
>
> Correct
>
>
>
>
>
>
>
>
> memory.org.sakaiproject.user.api.UserDirectoryService.callCache=timeToLiveSeconds=14400,timeToIdleSeconds=0,maxElementsInMemory=50000
>
>
>
> With this being cached so long, if a user updates their password it could
> take up to 4 hours to see the change?
>
>
>
>
>
> No, passwords aren't cached.  Authentications occur live against LDAP.  If
> the user's last name changes in LDAP it will not update in Sakai until the
> cache expires.  That small downside seems worth it for vastly better
> performance.
>
> This message is private and confidential. If you have received it in
> error, please notify the sender and remove it from your system.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://collab.sakaiproject.org/pipermail/sakai-dev/attachments/20131220/220e590a/attachment.html