<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
Hi Daniel,
<div class=""><br class="">
</div>
<div class="">Thanks for your reply. Where can I set the connection timeout? I tried to set it in the ldap.properties file and it gave me error.</div>
<div class=""><br class="">
</div>
<div class="">Hong</div>
<div class=""><br class="">
<div>
<blockquote type="cite" class="">
<div class="">On Mar 3, 2016, at 11:27 AM, Daniel Fisher <<a href="mailto:dfisher@vt.edu" class="">dfisher@vt.edu</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div dir="ltr" class="">
<div class="gmail_extra">
<div class="gmail_quote">On Thu, Mar 3, 2016 at 10:25 AM, Hong Ye <span dir="ltr" class="">
<<a href="mailto:hy93@cornell.edu" target="_blank" class="">hy93@cornell.edu</a>></span> wrote:<br class="">
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="word-wrap:break-word" class="">Hello,
<div class=""><br class="">
</div>
<div class="">I have two questions regarding LDAP connector.</div>
<div class=""><br class="">
</div>
<div class="">1. Our IDP 3 use active_passive connectionStrategy and default value of searchTimeLimit which is 5 seconds. To test the fail over, we shut down the directory service of the first AD on the list, it seem it took more than a minute to finish <font face="Menlo" class=""><span style="font-size:11px" class="">aacli.sh
command. Before the shutdown, it took less than 3 seconds to complete </span></font><span style="font-family:Menlo;font-size:11px" class="">aacli.sh command. After directory service shutdown, it took about 62 seconds to finish the same command. Is there any
configuration change I can make so that the failover happen faster? </span></div>
</div>
</blockquote>
<div class=""><br class="">
</div>
<div class="">Active_Passive means the first URL is always attempted first. If you shutdown that first host and you're seeing a long delay, then that's how long it's taking your client to decide the host is actually down. The default value for connection timeout
can be quite high and I'd say yours is 60 seconds. Set the connectTimeout property to something more reasonable (3-5 seconds?) and you should get better results.</div>
<div class=""> </div>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="word-wrap:break-word" class="">
<div class=""><span style="font-family:Menlo;font-size:11px" class=""><br class="">
</span></div>
<div class=""><font face="Menlo" class=""><span style="font-size:11px" class="">2.When</span></font> ROUND_ROBIN connectionStrategy is used, if ldap server being used for the new connection is down, will IDP try the next ldap url on the list?</div>
</div>
</blockquote>
<div class=""><br class="">
</div>
<div class="">Every new connection will be attempted in a round robin fashion. Regardless of whether any specific host is down. So yes.</div>
<div class=""><br class="">
</div>
<div class="">--Daniel Fisher</div>
<div class=""><br class="">
</div>
</div>
</div>
</div>
-- <br class="">
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" class="">
users-unsubscribe@shibboleth.net</a></div>
</blockquote>
</div>
<br class="">
</div>
</body>
</html>