LDAP connections pooling questions

[Cantor, Scott]

On 8/29/19, 11:07 AM, "users on behalf of Etienne Dysli Metref" <users-bounces at shibboleth.net on behalf of etienne.dysli-metref at switch.ch> wrote:

> I would add connection validation on "check out", that is when a
> connection is borrowed from the pool (`idp.pool.LDAP.validateOnCheckOut`
> property). It has a slight performance cost, but ensures the pool always
> hands out working connections.

I always do validation on check out with all pools, because otherwise you're counting on retries at the app layer to avoid failures.

> IMHO, the LDAP server or a firewall in-between are all allowed to close
> connections, as long as all parties agree on the connection state (TCP
> RSTs are sent properly). The pool should then close and reopen the
>connection.

I have never seen these warnings, FWIW.

-- Scott