PSMDB-1947-8.0-LDAP-User-Cache-Refresh-options#1116
Conversation
There was a problem hiding this comment.
Pull request overview
Adds documentation for new LDAP user cache refresh behavior, helping operators tune authentication performance by controlling when cached $external user entries are refreshed vs. invalidated.
Changes:
- Document new LDAP cache refresh options (
ldapUserCacheRefreshInterval,ldapShouldRefreshUserCacheEntries) and how they change cache behavior. - Describe interaction with the existing invalidation/eviction interval (
ldapUserCacheInvalidationInterval). - Provide configuration examples for runtime, command-line, and config-file usage (for the new options).
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| - `ldapUserCacheInvalidationInterval` controls how long (in seconds) cached LDAP user entries remain valid before they expire and are evicted from the cache. If you do not set this parameter explicitly, Percona Server for MongoDB uses the built-in default for your version. This parameter applies when `ldapShouldRefreshUserCacheEntries` is set to `false`. | ||
|
|
There was a problem hiding this comment.
This section documents ldapUserCacheInvalidationInterval, but the examples below only show how to set ldapUserCacheRefreshInterval / ldapShouldRefreshUserCacheEntries. Consider adding a matching runtime/CLI/config example for ldapUserCacheInvalidationInterval (or explicitly stating where/how to configure it) so readers can apply the expiration-based strategy as described.
There was a problem hiding this comment.
@copilot apply changes based on this feedback
There was a problem hiding this comment.
Added Runtime, Command line, and Configuration file examples for ldapUserCacheInvalidationInterval (expiration-based strategy) alongside the existing examples for the interval-based refresh strategy (commit cdfd1c7). Both strategies now have matching configuration examples under their own labeled sections.
…sh examples Agent-Logs-Url: https://github.com/percona/psmdb-docs/sessions/f13f0760-9be9-446a-be43-95b9cdbc9289 Co-authored-by: rasika-chivate <95711051+rasika-chivate@users.noreply.github.com>
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 1 out of 1 changed files in this pull request and generated 1 comment.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
ldapUserCacheInvalidationIntervalldapUserCacheInvalidationIntervalin docs/authorization.md (both interval-based refresh and expiration-based invalidation strategies shown)⌨️ Start Copilot coding agent tasks without leaving your editor — available in VS Code, Visual Studio, JetBrains IDEs and Eclipse.