idp.pool.LDAP.validatePeriod and Pruning

[Daniel Fisher]

On Tue, Nov 10, 2020 at 4:16 PM Fong, Trevor <trevor.fong at ubc.ca> wrote:

> That would explain the file descriptor exhaustion we see on our LDAP
> servers under high load.
>

Sorry, I rushed through this question earlier and jumped to what I
perceived as a documentation problem without answering your question. The
validatePeriod doesn't affect the pruning of the pool. The idleness of a
connection is a function of its time waiting to be checked out, it isn't
impacted by validation queries. The prunePeriod and idleTime *are* coupled;
setting and idleTime < prunePeriod wouldn't give you the desired results.

I don't think your resource exhaustion is related to these particular
settings. Under load it would be unlikely for connections to be removed
from the pool regardless of these settings.

--Daniel Fisher
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20201110/2bc120ad/attachment.htm>