mirror of
				https://github.com/minio/minio.git
				synced 2025-11-04 02:01:05 +01:00 
			
		
		
		
	This change uses the updated ldap library in minio/pkg (bumped up to v3). A new config parameter is added for LDAP configuration to specify extra user attributes to load from the LDAP server and to store them as additional claims for the user. A test is added in sts_handlers.go that shows how to access the LDAP attributes as a claim. This is in preparation for adding SSH pubkey authentication to MinIO's SFTP integration.
		
			
				
	
	
		
			203 lines
		
	
	
		
			5.5 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
			
		
		
	
	
			203 lines
		
	
	
		
			5.5 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
// Copyright (c) 2015-2021 MinIO, Inc.
 | 
						|
//
 | 
						|
// This file is part of MinIO Object Storage stack
 | 
						|
//
 | 
						|
// This program is free software: you can redistribute it and/or modify
 | 
						|
// it under the terms of the GNU Affero General Public License as published by
 | 
						|
// the Free Software Foundation, either version 3 of the License, or
 | 
						|
// (at your option) any later version.
 | 
						|
//
 | 
						|
// This program is distributed in the hope that it will be useful
 | 
						|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
 | 
						|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 | 
						|
// GNU Affero General Public License for more details.
 | 
						|
//
 | 
						|
// You should have received a copy of the GNU Affero General Public License
 | 
						|
// along with this program.  If not, see <http://www.gnu.org/licenses/>.
 | 
						|
 | 
						|
package scanner
 | 
						|
 | 
						|
import (
 | 
						|
	"fmt"
 | 
						|
	"strconv"
 | 
						|
	"time"
 | 
						|
 | 
						|
	"github.com/minio/minio/internal/config"
 | 
						|
	"github.com/minio/pkg/v3/env"
 | 
						|
)
 | 
						|
 | 
						|
// Compression environment variables
 | 
						|
const (
 | 
						|
	Speed    = "speed"
 | 
						|
	EnvSpeed = "MINIO_SCANNER_SPEED"
 | 
						|
 | 
						|
	IdleSpeed    = "idle_speed"
 | 
						|
	EnvIdleSpeed = "MINIO_SCANNER_IDLE_SPEED"
 | 
						|
 | 
						|
	ExcessVersions    = "alert_excess_versions"
 | 
						|
	EnvExcessVersions = "MINIO_SCANNER_ALERT_EXCESS_VERSIONS"
 | 
						|
 | 
						|
	ExcessFolders    = "alert_excess_folders"
 | 
						|
	EnvExcessFolders = "MINIO_SCANNER_ALERT_EXCESS_FOLDERS"
 | 
						|
 | 
						|
	// All below are deprecated in October 2022 and
 | 
						|
	// replaced them with a single speed parameter
 | 
						|
	Delay            = "delay"
 | 
						|
	MaxWait          = "max_wait"
 | 
						|
	Cycle            = "cycle"
 | 
						|
	EnvDelay         = "MINIO_SCANNER_DELAY"
 | 
						|
	EnvCycle         = "MINIO_SCANNER_CYCLE"
 | 
						|
	EnvDelayLegacy   = "MINIO_CRAWLER_DELAY"
 | 
						|
	EnvMaxWait       = "MINIO_SCANNER_MAX_WAIT"
 | 
						|
	EnvMaxWaitLegacy = "MINIO_CRAWLER_MAX_WAIT"
 | 
						|
)
 | 
						|
 | 
						|
// Config represents the heal settings.
 | 
						|
type Config struct {
 | 
						|
	// Delay is the sleep multiplier.
 | 
						|
	Delay float64 `json:"delay"`
 | 
						|
 | 
						|
	// Sleep always or based on incoming S3 requests.
 | 
						|
	IdleMode int32 // 0 => on, 1 => off
 | 
						|
 | 
						|
	// Alert upon this many excess object versions
 | 
						|
	ExcessVersions int64 // 100
 | 
						|
 | 
						|
	// Alert upon this many excess sub-folders per folder in an erasure set.
 | 
						|
	ExcessFolders int64 // 50000
 | 
						|
 | 
						|
	// MaxWait is maximum wait time between operations
 | 
						|
	MaxWait time.Duration
 | 
						|
	// Cycle is the time.Duration between each scanner cycles
 | 
						|
	Cycle time.Duration
 | 
						|
}
 | 
						|
 | 
						|
// DefaultKVS - default KV config for heal settings
 | 
						|
var DefaultKVS = config.KVS{
 | 
						|
	config.KV{
 | 
						|
		Key:   Speed,
 | 
						|
		Value: "default",
 | 
						|
	},
 | 
						|
	config.KV{
 | 
						|
		Key:           IdleSpeed,
 | 
						|
		Value:         "",
 | 
						|
		HiddenIfEmpty: true,
 | 
						|
	},
 | 
						|
	config.KV{
 | 
						|
		Key:   ExcessVersions,
 | 
						|
		Value: "100",
 | 
						|
	},
 | 
						|
	config.KV{
 | 
						|
		Key:   ExcessFolders,
 | 
						|
		Value: "50000",
 | 
						|
	},
 | 
						|
 | 
						|
	// Deprecated Oct 2022
 | 
						|
	config.KV{
 | 
						|
		Key:           Delay,
 | 
						|
		Value:         "",
 | 
						|
		HiddenIfEmpty: true,
 | 
						|
	},
 | 
						|
	// Deprecated Oct 2022
 | 
						|
	config.KV{
 | 
						|
		Key:           MaxWait,
 | 
						|
		Value:         "",
 | 
						|
		HiddenIfEmpty: true,
 | 
						|
	},
 | 
						|
	// Deprecated Oct 2022
 | 
						|
	config.KV{
 | 
						|
		Key:           Cycle,
 | 
						|
		Value:         "",
 | 
						|
		HiddenIfEmpty: true,
 | 
						|
	},
 | 
						|
}
 | 
						|
 | 
						|
// LookupConfig - lookup config and override with valid environment settings if any.
 | 
						|
func LookupConfig(kvs config.KVS) (cfg Config, err error) {
 | 
						|
	cfg = Config{
 | 
						|
		ExcessVersions: 100,
 | 
						|
		ExcessFolders:  50000,
 | 
						|
		IdleMode:       0, // Default is on
 | 
						|
	}
 | 
						|
 | 
						|
	if err = config.CheckValidKeys(config.ScannerSubSys, kvs, DefaultKVS); err != nil {
 | 
						|
		return cfg, err
 | 
						|
	}
 | 
						|
 | 
						|
	excessVersions, err := strconv.ParseInt(env.Get(EnvExcessVersions, kvs.GetWithDefault(ExcessVersions, DefaultKVS)), 10, 64)
 | 
						|
	if err != nil {
 | 
						|
		return cfg, err
 | 
						|
	}
 | 
						|
	cfg.ExcessVersions = excessVersions
 | 
						|
 | 
						|
	excessFolders, err := strconv.ParseInt(env.Get(EnvExcessFolders, kvs.GetWithDefault(ExcessFolders, DefaultKVS)), 10, 64)
 | 
						|
	if err != nil {
 | 
						|
		return cfg, err
 | 
						|
	}
 | 
						|
	cfg.ExcessFolders = excessFolders
 | 
						|
 | 
						|
	switch idleSpeed := env.Get(EnvIdleSpeed, kvs.GetWithDefault(IdleSpeed, DefaultKVS)); idleSpeed {
 | 
						|
	case "", config.EnableOn:
 | 
						|
		cfg.IdleMode = 0
 | 
						|
	case config.EnableOff:
 | 
						|
		cfg.IdleMode = 1
 | 
						|
	default:
 | 
						|
		return cfg, fmt.Errorf("unknown value: '%s'", idleSpeed)
 | 
						|
	}
 | 
						|
 | 
						|
	// Stick to loading deprecated config/env if they are already set, and the Speed value
 | 
						|
	// has not been changed from its "default" value, if it has been changed honor new settings.
 | 
						|
	if kvs.GetWithDefault(Speed, DefaultKVS) == "default" {
 | 
						|
		if kvs.Get(Delay) != "" && kvs.Get(MaxWait) != "" {
 | 
						|
			if err = lookupDeprecatedScannerConfig(kvs, &cfg); err != nil {
 | 
						|
				return cfg, err
 | 
						|
			}
 | 
						|
		}
 | 
						|
	}
 | 
						|
 | 
						|
	switch speed := env.Get(EnvSpeed, kvs.GetWithDefault(Speed, DefaultKVS)); speed {
 | 
						|
	case "fastest":
 | 
						|
		cfg.Delay, cfg.MaxWait, cfg.Cycle = 0, 0, time.Second
 | 
						|
	case "fast":
 | 
						|
		cfg.Delay, cfg.MaxWait, cfg.Cycle = 1, 100*time.Millisecond, time.Minute
 | 
						|
	case "default":
 | 
						|
		cfg.Delay, cfg.MaxWait, cfg.Cycle = 2, time.Second, time.Minute
 | 
						|
	case "slow":
 | 
						|
		cfg.Delay, cfg.MaxWait, cfg.Cycle = 10, 15*time.Second, time.Minute
 | 
						|
	case "slowest":
 | 
						|
		cfg.Delay, cfg.MaxWait, cfg.Cycle = 100, 15*time.Second, 30*time.Minute
 | 
						|
	default:
 | 
						|
		return cfg, fmt.Errorf("unknown '%s' value", speed)
 | 
						|
	}
 | 
						|
 | 
						|
	return cfg, nil
 | 
						|
}
 | 
						|
 | 
						|
func lookupDeprecatedScannerConfig(kvs config.KVS, cfg *Config) (err error) {
 | 
						|
	delay := env.Get(EnvDelayLegacy, "")
 | 
						|
	if delay == "" {
 | 
						|
		delay = env.Get(EnvDelay, kvs.GetWithDefault(Delay, DefaultKVS))
 | 
						|
	}
 | 
						|
	cfg.Delay, err = strconv.ParseFloat(delay, 64)
 | 
						|
	if err != nil {
 | 
						|
		return err
 | 
						|
	}
 | 
						|
	maxWait := env.Get(EnvMaxWaitLegacy, "")
 | 
						|
	if maxWait == "" {
 | 
						|
		maxWait = env.Get(EnvMaxWait, kvs.GetWithDefault(MaxWait, DefaultKVS))
 | 
						|
	}
 | 
						|
	cfg.MaxWait, err = time.ParseDuration(maxWait)
 | 
						|
	if err != nil {
 | 
						|
		return err
 | 
						|
	}
 | 
						|
	cycle := env.Get(EnvCycle, kvs.GetWithDefault(Cycle, DefaultKVS))
 | 
						|
	if cycle == "" {
 | 
						|
		cycle = "1m"
 | 
						|
	}
 | 
						|
	cfg.Cycle, err = time.ParseDuration(cycle)
 | 
						|
	if err != nil {
 | 
						|
		return err
 | 
						|
	}
 | 
						|
	return nil
 | 
						|
}
 |