CP-311971: enable AD extauth cache by default for new pools (#6968)

This is long overdue, but we finally got some QA resource to complete
the test plan, and no major bugs were found.

There is one improvement that could be made: when deleting a user/group
(or otherwise changing permissions) on the XAPI side we could
immediately expire any caches related to that user.

Author: edwintorok

ocaml/idl/datamodel_common.ml

@@ -10,7 +10,7 @@ open Datamodel_roles
               to leave a gap for potential hotfixes needing to increment the schema version.*)
 let schema_major_vsn = 5
 
-let schema_minor_vsn = 900
+let schema_minor_vsn = 901
 
 (* Historical schema versions just in case this is useful later *)
 let rio_schema_major_vsn = 5

ocaml/idl/datamodel_pool.ml

@@ -2196,9 +2196,8 @@ let t =
         ; field ~qualifier:StaticRO ~ty:Int ~default_value:(Some (VInt 1L))
             ~lifecycle:[] "ext_auth_max_threads"
             "Maximum number of threads to use for external (AD) authentication"
-        ; field ~qualifier:DynamicRO ~ty:Bool
-            ~default_value:(Some (VBool false)) ~lifecycle:[]
-            "ext_auth_cache_enabled"
+        ; field ~qualifier:DynamicRO ~ty:Bool ~default_value:(Some (VBool true))
+            ~lifecycle:[] "ext_auth_cache_enabled"
             "Specifies whether external authentication caching is enabled for \
              this pool or not"
         ; field ~qualifier:DynamicRO ~ty:Int ~default_value:(Some (VInt 50L))

ocaml/idl/schematest.ml

@@ -3,7 +3,7 @@ let hash x = Digest.string x |> Digest.to_hex
 (* BEWARE: if this changes, check that schema has been bumped accordingly in
    ocaml/idl/datamodel_common.ml, usually schema_minor_vsn *)
 
-let last_known_schema_hash = "08510322cf77e8ba10082f2e611ebb40"
+let last_known_schema_hash = "32bbba07579ca8844fa6162164530268"
 
 let current_schema_hash : string =
   let open Datamodel_types in