IdPv3 reload-service.sh and existing LDAP pool

Scott Koranda skoranda at gmail.com
Wed Sep 14 14:56:02 EDT 2016


> On 9/14/16, 2:41 PM, "users on behalf of Scott Koranda" <users-bounces at shibboleth.net on behalf of skoranda at gmail.com> wrote:
> 
> > will the existing pool of LDAP connections be "torn down" and
> >    new connections created with the new value for baseDN?
> 
> That would be my expectation/assumption. All the objects defined in that Spring context are being created and then swapped in behind a single synchronized service facade.
> 
> However, I think we've noted that we're not reloading
> properties, so you couldn't effect such a change unless the
> baseDN were inline.

The essential configuration in attribute-resolver.xml is

<resolver:DataConnector id="myLDAP" xsi:type="dc:LDAPDirectory"
        ldapURL="ldap://myserver"
        baseDN="dc=myorg,dc=org"
        connectionStrategy="ACTIVE_PASSIVE"
        searchScope="SUBTREE" >
        <dc:FilterTemplate>
            <![CDATA[
                (uid=$resolutionContext.principal)
            ]]>
        </dc:FilterTemplate>
</resolver:DataConnector>

so I think that is "inline".

I am not seeing the expected changes after the reload but I am not
confident there is not another issue. 

Thanks,

Scott K


More information about the users mailing list