Make the cache TTL configurable

myauth/ldap.py

@@ -36,6 +36,13 @@ class LDAPConnection:
         self.__LDAP_FILTER = ldap_setting("FILTER", "")
         self.__LDAP_SEARCH_BASE = ldap_setting("SEARCH_BASE", "")
 
+        # The time a cache entry is valid (in hours)
+        try:
+            self.__LDAP_CACHE_TTL = int(ldap_setting("CACHE_TTL", ""))
+        except ValueError:
+            logging.error("Invalid value for cache_ttl. Defaulting to 1 hour")
+            self.__LDAP_CACHE_TTL = 1
+
         password = ldap_setting("BIND_PW", "")
         if not password:
             pwfile = ldap_setting("BIND_PW_FILE", "")
@@ -84,7 +91,7 @@ class LDAPConnection:
             return False
 
         if len(result) == 1:
-            self.__user_cache[username] = timezone.now() + timezone.timedelta(hours=1)
+            self.__user_cache[username] = timezone.now() + timezone.timedelta(hours=self.__LDAP_CACHE_TTL)
             return True
         return False