[Date Prev][Date Next]
Re: (ITS#4115) Connection timeouts in back-ldap and back-meta
On Fri, 2005-10-28 at 10:55 +0000, firstname.lastname@example.org
> Full_Name: Andrew Findlay
> Version: 2.2
> OS: Linux
> Submission from: (NULL) (220.127.116.11)
> It would be useful to be able to set a timeout on connections created by
> back-ldap and back-meta so that idle connections get closed.
> The reason for this is that some firewalls silently time out idle TCP sessions.
> As a result, if one of these backends is being used to create a relay through
> a firewall, it is quite likely to encounter long delays on the first query
> an idle period.
> Timeouts are available on sessions coming into the server. This is a request
> the same config options to be available on connections initiated by the server.
While cleaning up the code, I noted that back-meta has an old,
undocumented timeout configuration parameter that sets a timeout at the
client library LDAP handler level. I don't know if this implements what
you mean, I don't remember testing it any time, but it might make the
trick. There shouldn't be an equivalent in back-ldap, though. If you
report successfully, we might consider refreshing, documenting and
porting that feature back into back-ldap.