Idle Timeout & SSL

["Justin Schwartz" <justin@ivorytower.co.za>]

Hi,
  It seems when I use SSL to connect to openLDAP that it hangs onto the
connection indefinately.  I have set the idletimeout paramter in the
slapd.conf to 5, 10, 30, 300 seconds and they are *never* let go.

This issue doesn't occur when using a non-secure connection, but that is
unfortunately not an option.
(When I kill slapd I can see the connections that it finally frees up:

TLS trace: SSL3 alert write:warning:close notify
)

Is there a way to resolve this ?  A patch perhaps? I don't mind rebuilding
the server, I just want it to work.

Thanks

----------------------//...
Justin Schwartz
Senior Programmer
Ivory Tower Internet Solutions
+27 21 418-8230 (voice)
+27 21 425-4537 (fax)
+27 (0)82 487-3821 (cellular)
justin@ivorytower.co.za (mail)