LDAP connections Retry

[Daniel Fisher]

On Thu, Dec 21, 2017 at 10:45 PM, Niva Agmon <nagmon at temple.edu> wrote:

> Dec 20 22:50:37 xxxx.temple.edu #011Caused by:
> org.ldaptive.LdapException: javax.naming.NamingException: LDAP response
> read timed out, timeout used:3000ms.
>

You can control the response timeout, so increasing it may be a reasonable
option for you.

b.       Creating new connections – fails partially - just realized that it
> works if I use ssl (port 636), but fails if we use starttls –
>

The reason it's failing is that startTLS is an extended operation performed
on the connection and your LDAP is taking too long to perform operations.
There's not much the IDP can do if your LDAP cannot keep up.
Increasing the response timeout may get the data back to the client
eventually, but the wait time could be unacceptable.
I'd recommend that you look at tuning your LDAP before tweaking the IDP
configuration.

--Daniel Fisher
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171222/edde970b/attachment.html>