Active Directory Connection Timeout

Daniel Fisher dfisher at vt.edu
Fri Sep 7 15:09:25 EDT 2018


On Fri, Sep 7, 2018 at 5:39 AM Teresa Fasano <t.fasano at cineca.it> wrote:

> Can you recommend a configuration to make fast authentication in case
> the first Active Directory is not available?
>

Tuning connectTimeout and responseTimeout are your best bets, but several
minutes is much longer than I would expect even in a degraded mode.
To Nate's point, checking your logs and seeing where the wait is occurring
will help diagnose the problem.
I recommend putting org.ldaptive in DEBUG while you're testing.

--Daniel Fisher
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180907/768f2af9/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6317 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://shibboleth.net/pipermail/users/attachments/20180907/768f2af9/attachment.p7s>


More information about the users mailing list