WARN [org.ldaptive.AbstractOperation$ReopenOperationExceptionHandler:251] - Operation exception encountered, reopening connection

[Daniel Fisher]

On Tue, May 25, 2021 at 6:43 PM Lipscomb, Gary via users <
users at shibboleth.net> wrote:

>
> The errors seem to occur in very low activity periods of the IdP.
>

Your directory (or load balancer) is likely dropping connections after some
period of inactivity. Which is why you see this during lulls.


>
> Caused by: com.unboundid.ldap.sdk.LDAPException: An error occurred while
> attempting to send the LDAP message to server REDACTED.csu.edu.au:389:
> SocketException(Connection reset by peer (Write failed)),
> ldapSDKVersion=4.0.14, revision=c0fb784eebf9d36a67c736d0428fb3577f2e25bb
>         at
> com.unboundid.ldap.sdk.LDAPConnectionInternals.sendMessage(LDAPConnectionInternals.java:630)
>

Ask your directory administrator what the timeout is and then configure
validatePeriodically=true with a validatePeriod less than the timeout.


idp.authn.LDAP.usePasswordPolicy = true
>

This activates this control:
http://tools.ietf.org/html/draft-behera-ldap-password-policy-10

idp.authn.LDAP.usePasswordExpiration = true
>

This activates this control:
http://tools.ietf.org/html/draft-vchu-ldap-pwd-policy-00

While it's generally harmless (additional overhead) to enable these
features, it's unlikely you're using both of these password related
controls. Another question for your directory administrator.

--Daniel Fisher
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210526/5990eb14/attachment.htm>