Multiple LDAP connections

[Peter Schober]

* Prasanna <PVBalachandar at imperosoftware.com> [2014-03-17 12:52]:
> Will it be possible to connect to 300 LDAP's with one IdP (300
> connections in one login.config and 300 connections in attribute
> resolver)?

Can you ensure that usernames don't overlap between those DSAs or that
if a username exists in more than one of those 300 DSAs it always
identifies the same subject?

That would be a precondition since the IDP would need to iterate over
all configured DSAs until it found a match.
Also if some identity is only stored in a DSA far down that list I
would expect logins for that subject to take a very long time since
the IDP would have to search all the DSAs higher up in the list first.
So I don't think that's a good model.

As for the sheer number of entries I guess you'd have to try that for
yourself. VT-LDAP (or whatever it's current name is) has lots of
tunables and you likely will have to change the LDAP connection pool
parameters.
-peter