Description of problem: Some customers ask for the possibility to close a client connection (from RHDS side) when a BIND is failing. This is to prevent some malformed applications (that ignore BIND return code) to load the server with further requests. We could for example add a config parameter called nsslapd-closure-on-bind-failure for this purpose Version-Release number of selected component (if applicable): How reproducible: N/A Steps to Reproduce: N/A Actual results: Expected results: Additional info:
Automated tests pass: ============================================================= test session starts ============================================================= platform linux -- Python 3.9.17, pytest-7.4.0, pluggy-0.13.1 -- /usr/bin/python3 cachedir: .pytest_cache metadata: {'Python': '3.9.17', 'Platform': 'Linux-5.14.0-344.el9.x86_64-x86_64-with-glibc2.34', 'Packages': {'pytest': '7.4.0', 'pluggy': '0.13.1'}, 'Plugins': {'metadata': '3.0.0', 'html': '3.2.0', 'libfaketime': '0.1.2', 'flaky': '3.7.0'}} 389-ds-base: 2.3.4-3.el9 nss: 3.90.0-2.el9_2 nspr: 4.35.0-2.el9_2 openldap: 2.6.3-1.el9 cyrus-sasl: 2.1.27-21.el9 FIPS: disabled rootdir: /mnt/tests/rhds/tests/upstream/ds/dirsrvtests configfile: pytest.ini plugins: metadata-3.0.0, html-3.2.0, libfaketime-0.1.2, flaky-3.7.0 collected 56 items / 51 deselected / 5 selected dirsrvtests/tests/suites/basic/basic_test.py::test_bind_invalid_entry PASSED [ 20%] dirsrvtests/tests/suites/basic/basic_test.py::test_bind_entry_missing_passwd PASSED [ 40%] dirsrvtests/tests/suites/basic/basic_test.py::test_bind_disconnect_invalid_entry PASSED [ 60%] dirsrvtests/tests/suites/basic/basic_test.py::test_bind_disconnect_cert_map_failed PASSED [ 80%] dirsrvtests/tests/suites/basic/basic_test.py::test_bind_disconnect_account_lockout PASSED [100%] ========================================== 5 passed, 51 deselected, 35 warnings in 65.44s (0:01:05) ========================================== Marking as Verified:Tested