Handling empty LDAP connection pools on IdP start-up

Cantor, Scott cantor.2 at osu.edu
Fri Mar 10 11:47:46 EST 2017


On 3/10/17, 11:35 AM, "users on behalf of Wessel, Keith" <users-bounces at shibboleth.net on behalf of kwessel at illinois.edu> wrote:

> Adding the validatorRef to my data connector did the trick. Now, if the whole LDAP cluster is down on restart, the pool at
> least continues to try and make connections and the attribute resolver starts working once a connection is successfully added
> to the pool. That's what I wanted.

Right, I'm just saying you'd still see an error at runtime for users, or at least a total lack of attributes, which may or may not be what you want.

> Scott, adding the fallback static connector would allow my other data connectors to continue functioning even if one was
> down and would also prevent run-time errors, correct? What would this static connector look like? That is what attributes, if
> any, would be in it?

Yes, and it doesn't matter what's in it, I just put one in called "dummy" with a value of 0 or something, and I use that to backstop all my secondary connectors.

-- Scott





More information about the users mailing list