<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On Fri, Dec 16, 2016 at 10:04 AM, Ted Wood <span dir="ltr"><<a href="mailto:TWood@parker.edu" target="_blank">TWood@parker.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">





<div lang="EN-US" link="blue" vlink="purple">
<div class="m_3202305283816773509m_6831125570205011543m_-481390545287431762WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">I already have this rule in the connectionConfig bean:<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal">p:connectTimeout="%{idp.authn.<wbr>LDAP.connectTimeout:3000}" <u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">On its face it seems like it would do the same thing but is there a difference?</span></p></div></div></blockquote><div><br></div><div>There is. One controls timeout for new connections, the other controls timeouts for LDAP operation reads.</div><div><br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div lang="EN-US" link="blue" vlink="purple"><div class="m_3202305283816773509m_6831125570205011543m_-481390545287431762WordSection1"><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">  I’ve also noticed a bunch of these messages in the idp-warn.log:<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">WARN [org.ldaptive.AbstractOperatio<wbr>n$ReopenOperationExceptionHand<wbr>ler:277] - Operation exception encountered, reopening connection</span></p></div></div></blockquote><div><br></div><div>These messages can indicate that your LDAP or load balancer is dropping connections.</div><div>Tuning your pool config by lowering the validatePeriod may keep your connections alive.</div><div><br></div><div> <span style="color:rgb(31,73,125);font-family:Calibri,sans-serif;font-size:11pt"> </span></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div lang="EN-US" link="blue" vlink="purple"><div class="m_3202305283816773509m_6831125570205011543m_-481390545287431762WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">I found a reference to this warning here:<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><a href="http://shibboleth.net/pipermail/users/2015-March/020576.html" target="_blank">http://shibboleth.net/pipermai<wbr>l/users/2015-March/020576.html</a><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">and this is supposed to be a bug that was fixed in ldaptive 1.0.6 which I am already using.  Perhaps this is an edge case and would there be an problem with upgrading
 just the ldaptive jar to 1.2.1 which appears to be the latest version?</span></p></div></div></blockquote><div><br></div><div>Unless you're seeing that *exact* stacktrace, then this bug is unrelated.</div><div>ldaptive v1.2.1 will not work with the current IDP.</div><div><br></div><div>--Daniel Fisher</div><div><br></div></div></div></div>