mirror of
				https://github.com/minio/minio.git
				synced 2025-10-31 00:01:27 +01:00 
			
		
		
		
	This change uses the updated ldap library in minio/pkg (bumped up to v3). A new config parameter is added for LDAP configuration to specify extra user attributes to load from the LDAP server and to store them as additional claims for the user. A test is added in sts_handlers.go that shows how to access the LDAP attributes as a claim. This is in preparation for adding SSH pubkey authentication to MinIO's SFTP integration.
		
			
				
	
	
		
			203 lines
		
	
	
		
			5.5 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
			
		
		
	
	
			203 lines
		
	
	
		
			5.5 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
| // Copyright (c) 2015-2021 MinIO, Inc.
 | |
| //
 | |
| // This file is part of MinIO Object Storage stack
 | |
| //
 | |
| // This program is free software: you can redistribute it and/or modify
 | |
| // it under the terms of the GNU Affero General Public License as published by
 | |
| // the Free Software Foundation, either version 3 of the License, or
 | |
| // (at your option) any later version.
 | |
| //
 | |
| // This program is distributed in the hope that it will be useful
 | |
| // but WITHOUT ANY WARRANTY; without even the implied warranty of
 | |
| // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 | |
| // GNU Affero General Public License for more details.
 | |
| //
 | |
| // You should have received a copy of the GNU Affero General Public License
 | |
| // along with this program.  If not, see <http://www.gnu.org/licenses/>.
 | |
| 
 | |
| package scanner
 | |
| 
 | |
| import (
 | |
| 	"fmt"
 | |
| 	"strconv"
 | |
| 	"time"
 | |
| 
 | |
| 	"github.com/minio/minio/internal/config"
 | |
| 	"github.com/minio/pkg/v3/env"
 | |
| )
 | |
| 
 | |
| // Compression environment variables
 | |
| const (
 | |
| 	Speed    = "speed"
 | |
| 	EnvSpeed = "MINIO_SCANNER_SPEED"
 | |
| 
 | |
| 	IdleSpeed    = "idle_speed"
 | |
| 	EnvIdleSpeed = "MINIO_SCANNER_IDLE_SPEED"
 | |
| 
 | |
| 	ExcessVersions    = "alert_excess_versions"
 | |
| 	EnvExcessVersions = "MINIO_SCANNER_ALERT_EXCESS_VERSIONS"
 | |
| 
 | |
| 	ExcessFolders    = "alert_excess_folders"
 | |
| 	EnvExcessFolders = "MINIO_SCANNER_ALERT_EXCESS_FOLDERS"
 | |
| 
 | |
| 	// All below are deprecated in October 2022 and
 | |
| 	// replaced them with a single speed parameter
 | |
| 	Delay            = "delay"
 | |
| 	MaxWait          = "max_wait"
 | |
| 	Cycle            = "cycle"
 | |
| 	EnvDelay         = "MINIO_SCANNER_DELAY"
 | |
| 	EnvCycle         = "MINIO_SCANNER_CYCLE"
 | |
| 	EnvDelayLegacy   = "MINIO_CRAWLER_DELAY"
 | |
| 	EnvMaxWait       = "MINIO_SCANNER_MAX_WAIT"
 | |
| 	EnvMaxWaitLegacy = "MINIO_CRAWLER_MAX_WAIT"
 | |
| )
 | |
| 
 | |
| // Config represents the heal settings.
 | |
| type Config struct {
 | |
| 	// Delay is the sleep multiplier.
 | |
| 	Delay float64 `json:"delay"`
 | |
| 
 | |
| 	// Sleep always or based on incoming S3 requests.
 | |
| 	IdleMode int32 // 0 => on, 1 => off
 | |
| 
 | |
| 	// Alert upon this many excess object versions
 | |
| 	ExcessVersions int64 // 100
 | |
| 
 | |
| 	// Alert upon this many excess sub-folders per folder in an erasure set.
 | |
| 	ExcessFolders int64 // 50000
 | |
| 
 | |
| 	// MaxWait is maximum wait time between operations
 | |
| 	MaxWait time.Duration
 | |
| 	// Cycle is the time.Duration between each scanner cycles
 | |
| 	Cycle time.Duration
 | |
| }
 | |
| 
 | |
| // DefaultKVS - default KV config for heal settings
 | |
| var DefaultKVS = config.KVS{
 | |
| 	config.KV{
 | |
| 		Key:   Speed,
 | |
| 		Value: "default",
 | |
| 	},
 | |
| 	config.KV{
 | |
| 		Key:           IdleSpeed,
 | |
| 		Value:         "",
 | |
| 		HiddenIfEmpty: true,
 | |
| 	},
 | |
| 	config.KV{
 | |
| 		Key:   ExcessVersions,
 | |
| 		Value: "100",
 | |
| 	},
 | |
| 	config.KV{
 | |
| 		Key:   ExcessFolders,
 | |
| 		Value: "50000",
 | |
| 	},
 | |
| 
 | |
| 	// Deprecated Oct 2022
 | |
| 	config.KV{
 | |
| 		Key:           Delay,
 | |
| 		Value:         "",
 | |
| 		HiddenIfEmpty: true,
 | |
| 	},
 | |
| 	// Deprecated Oct 2022
 | |
| 	config.KV{
 | |
| 		Key:           MaxWait,
 | |
| 		Value:         "",
 | |
| 		HiddenIfEmpty: true,
 | |
| 	},
 | |
| 	// Deprecated Oct 2022
 | |
| 	config.KV{
 | |
| 		Key:           Cycle,
 | |
| 		Value:         "",
 | |
| 		HiddenIfEmpty: true,
 | |
| 	},
 | |
| }
 | |
| 
 | |
| // LookupConfig - lookup config and override with valid environment settings if any.
 | |
| func LookupConfig(kvs config.KVS) (cfg Config, err error) {
 | |
| 	cfg = Config{
 | |
| 		ExcessVersions: 100,
 | |
| 		ExcessFolders:  50000,
 | |
| 		IdleMode:       0, // Default is on
 | |
| 	}
 | |
| 
 | |
| 	if err = config.CheckValidKeys(config.ScannerSubSys, kvs, DefaultKVS); err != nil {
 | |
| 		return cfg, err
 | |
| 	}
 | |
| 
 | |
| 	excessVersions, err := strconv.ParseInt(env.Get(EnvExcessVersions, kvs.GetWithDefault(ExcessVersions, DefaultKVS)), 10, 64)
 | |
| 	if err != nil {
 | |
| 		return cfg, err
 | |
| 	}
 | |
| 	cfg.ExcessVersions = excessVersions
 | |
| 
 | |
| 	excessFolders, err := strconv.ParseInt(env.Get(EnvExcessFolders, kvs.GetWithDefault(ExcessFolders, DefaultKVS)), 10, 64)
 | |
| 	if err != nil {
 | |
| 		return cfg, err
 | |
| 	}
 | |
| 	cfg.ExcessFolders = excessFolders
 | |
| 
 | |
| 	switch idleSpeed := env.Get(EnvIdleSpeed, kvs.GetWithDefault(IdleSpeed, DefaultKVS)); idleSpeed {
 | |
| 	case "", config.EnableOn:
 | |
| 		cfg.IdleMode = 0
 | |
| 	case config.EnableOff:
 | |
| 		cfg.IdleMode = 1
 | |
| 	default:
 | |
| 		return cfg, fmt.Errorf("unknown value: '%s'", idleSpeed)
 | |
| 	}
 | |
| 
 | |
| 	// Stick to loading deprecated config/env if they are already set, and the Speed value
 | |
| 	// has not been changed from its "default" value, if it has been changed honor new settings.
 | |
| 	if kvs.GetWithDefault(Speed, DefaultKVS) == "default" {
 | |
| 		if kvs.Get(Delay) != "" && kvs.Get(MaxWait) != "" {
 | |
| 			if err = lookupDeprecatedScannerConfig(kvs, &cfg); err != nil {
 | |
| 				return cfg, err
 | |
| 			}
 | |
| 		}
 | |
| 	}
 | |
| 
 | |
| 	switch speed := env.Get(EnvSpeed, kvs.GetWithDefault(Speed, DefaultKVS)); speed {
 | |
| 	case "fastest":
 | |
| 		cfg.Delay, cfg.MaxWait, cfg.Cycle = 0, 0, time.Second
 | |
| 	case "fast":
 | |
| 		cfg.Delay, cfg.MaxWait, cfg.Cycle = 1, 100*time.Millisecond, time.Minute
 | |
| 	case "default":
 | |
| 		cfg.Delay, cfg.MaxWait, cfg.Cycle = 2, time.Second, time.Minute
 | |
| 	case "slow":
 | |
| 		cfg.Delay, cfg.MaxWait, cfg.Cycle = 10, 15*time.Second, time.Minute
 | |
| 	case "slowest":
 | |
| 		cfg.Delay, cfg.MaxWait, cfg.Cycle = 100, 15*time.Second, 30*time.Minute
 | |
| 	default:
 | |
| 		return cfg, fmt.Errorf("unknown '%s' value", speed)
 | |
| 	}
 | |
| 
 | |
| 	return cfg, nil
 | |
| }
 | |
| 
 | |
| func lookupDeprecatedScannerConfig(kvs config.KVS, cfg *Config) (err error) {
 | |
| 	delay := env.Get(EnvDelayLegacy, "")
 | |
| 	if delay == "" {
 | |
| 		delay = env.Get(EnvDelay, kvs.GetWithDefault(Delay, DefaultKVS))
 | |
| 	}
 | |
| 	cfg.Delay, err = strconv.ParseFloat(delay, 64)
 | |
| 	if err != nil {
 | |
| 		return err
 | |
| 	}
 | |
| 	maxWait := env.Get(EnvMaxWaitLegacy, "")
 | |
| 	if maxWait == "" {
 | |
| 		maxWait = env.Get(EnvMaxWait, kvs.GetWithDefault(MaxWait, DefaultKVS))
 | |
| 	}
 | |
| 	cfg.MaxWait, err = time.ParseDuration(maxWait)
 | |
| 	if err != nil {
 | |
| 		return err
 | |
| 	}
 | |
| 	cycle := env.Get(EnvCycle, kvs.GetWithDefault(Cycle, DefaultKVS))
 | |
| 	if cycle == "" {
 | |
| 		cycle = "1m"
 | |
| 	}
 | |
| 	cfg.Cycle, err = time.ParseDuration(cycle)
 | |
| 	if err != nil {
 | |
| 		return err
 | |
| 	}
 | |
| 	return nil
 | |
| }
 |