idp.pool.LDAP.validatePeriod and Pruning

Daniel Fisher dfisher at
Wed Nov 11 00:13:20 UTC 2020

On Tue, Nov 10, 2020 at 4:16 PM Fong, Trevor <trevor.fong at> wrote:

> That would explain the file descriptor exhaustion we see on our LDAP
> servers under high load.

Sorry, I rushed through this question earlier and jumped to what I
perceived as a documentation problem without answering your question. The
validatePeriod doesn't affect the pruning of the pool. The idleness of a
connection is a function of its time waiting to be checked out, it isn't
impacted by validation queries. The prunePeriod and idleTime *are* coupled;
setting and idleTime < prunePeriod wouldn't give you the desired results.

I don't think your resource exhaustion is related to these particular
settings. Under load it would be unlikely for connections to be removed
from the pool regardless of these settings.

--Daniel Fisher
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the users mailing list