<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Hi all,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I wanted to ask the users list if I was doing something wrong.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">We are currently using Shibboleth IDP v4.2.1 upgraded from v3 over the years.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">We recently added an LDAP data connector using these non-default pool settings (everything else default):<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">minPoolSize=3<o:p></o:p></p>
<p class="MsoNormal">maxPoolSize=100<o:p></o:p></p>
<p class="MsoNormal">blockWaitTime=PT1S<o:p></o:p></p>
<p class="MsoNormal">validatePeriodically=true<o:p></o:p></p>
<p class="MsoNormal">validateTimerPeriod=PT10S<o:p></o:p></p>
<p class="MsoNormal">expirationTime=PT30S<o:p></o:p></p>
<p class="MsoNormal">prunePeriod=PT15S<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">So I've noticed with netstat the number of ESTABLISHED LDAP connections on startup = 6 connections (not 3). And then every time the resolver reloads yields +6 more connections.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">If I reload the resolver as a test, it will add 6 more ldap connections for every reload and they don't go away. My production IdP stayed at 36 established ldap connections for 10 days even during low load periods. The connections don't
go away until I restart tomcat.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I read through some older emails in here and Scott stated that unboundid should not have these types of persistent ldap connections. I don't think I've purposely disabled unboundid.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I was curious if maybe this is something I need to fix in tomcat or maybe at the OS.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks,<o:p></o:p></p>
<p class="MsoNormal">Steve Mak<o:p></o:p></p>
</div>
</body>
</html>