LDAP failover on error

[Daniel Fisher]

On Thu, Oct 18, 2012 at 7:53 PM, Dan McLaughlin
<dmclaughlin at tech-consortium.com> wrote:
> We are trying to configure our LDAP Data Connector and Login.config so that
> LDAP connections failover if the LDAP server returns an error OR is down.
> Based on the exception below it would seem that the LDAP code as it stands
> today is not able to failover if LDAP queries return errors, only if the
> connection can't be established.  Is this correct?
>

You can configure operation retries based on a specific naming
exception, but I'm not sure if that will provide the behavior you
want:

edu.vt.middleware.ldap.jaas.LdapLoginModule sufficient
     ldapUrl="ldap://server-hq8.mydomain.local:636
ldap://hq8.mydomain.local:636 ldap://server-hq5.mydomain.local:636"
     ssl="true"
     connectionHandler="edu.vt.middleware.ldap.handler.DefaultConnectionHandler{{connectionStrategy=ACTIVE_PASSIVE}}"
     operationRetryExceptions="javax.naming.NamingException"
     timeout="1000"
     baseDn="T=MYTREE"
     subtreeSearch="true"
     derefAliases="never"
     userFilter="(&(cn={0})(objectclass=person))";

If reopening the connection does not resolve the issue, then we're
probably looking at a custom connection handler to solve this problem.

--Daniel Fisher