IDP Login Delay Question

[Peter Schober]

* Joseph Lucia <jlucia at cysd.k12.pa.us> [2014-03-27 13:11]:
> ShibUserPassAuth {
> 
>    edu.vt.middleware.ldap.jaas.LdapLoginModule required
>       ldapUrl="ldap://dc1.mydomain.com ldap://dc2.mydomain.com
> ldap://dc3.mydomain.com"
>       baseDn="dc=mydomain,dc=com"
>       subtreeSearch="true"
>       ssl="true"
>       tls="false"
>       userFilter="sAMAccountName={0}"
>       bindDn="CN=Binder,dc=mydomain,dc=com"
>       bindCredential="mybinderpassword";
> };

Servers being called dc (domain controller) is this MS-Active
Directory? Isn't there some issue with subtree searches from the
baseDN (and whether or not to connect to the Global Catalog port or
not)?
Also, can you remove 2 of the 3 servers and try again, each time with
only one of those in the ldapUrl list? Does that change anything?
-peter