Shib

[Domingues, Michael D]

https://wiki.shibboleth.net/confluence/display/IDP30/LDAPAuthnConfiguration

Assuming you're using the built-in (and not the JAAS) LDAP authentication system, idp.pool.LDAP.validatePeriod, idp.pool.LDAP.validatePeriodically, and idp.pool.LDAP.validateOnCheckout are probably what you're looking for.


Now, that said, is it wise? Questionable. In my environment (for example) I actually had to increase the frequency of validation, because a load balancer we have in front of our AD environment was closing out sessions.


Log filtering is probably just a better strategy here.


________________________________
From: users <users-bounces at shibboleth.net> on behalf of Cheltenham, Chris <ccheltenham-ext at philasd.org>
Sent: Thursday, June 29, 2017 1:44:24 PM
To: users at shibboleth.net
Subject: Shib


Hello,

We are finding Shibboleth to be very chatty to LDAP in that I guess it tries to keep its connection open.

Can we limit that?

Its creating a whole lot of garbage in out ldap logs.



===========================

Thank You;

Chris Cheltenham
Technology Services
The School District of Philadelphia

Work # 215-400-5025
Cell # 215-301-6571
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170629/26201589/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.gif
Type: image/gif
Size: 1089 bytes
Desc: image001.gif
URL: <http://shibboleth.net/pipermail/users/attachments/20170629/26201589/attachment.gif>