LDAP connections pooling questions

Guillaume Rousse guillaume.rousse at renater.fr
Thu Aug 29 11:45:12 EDT 2019


Le 29/08/2019 à 17:16, Cantor, Scott a écrit :
> On 8/29/19, 11:07 AM, "users on behalf of Etienne Dysli Metref" <users-bounces at shibboleth.net on behalf of etienne.dysli-metref at switch.ch> wrote:
> 
>> I would add connection validation on "check out", that is when a
>> connection is borrowed from the pool (`idp.pool.LDAP.validateOnCheckOut`
>> property). It has a slight performance cost, but ensures the pool always
>> hands out working connections.
> 
> I always do validation on check out with all pools, because otherwise you're counting on retries at the app layer to avoid failures.
I missed this one, because the documentation page on the wiki didn't 
mentionned it (I just fixed the issue). Basically, validation should be 
either performed periodically, either on check-out, but there isn't much 
interest in doing both, right ?

Regards.
-- 
Guillaume Rousse
Pôle SSI

Tel: +33 1 53 94 20 45
www.renater.fr

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3637 bytes
Desc: Signature cryptographique S/MIME
URL: <http://shibboleth.net/pipermail/users/attachments/20190829/9e28a2e2/attachment.p7s>


More information about the users mailing list