Hallvard Breien Furuseth wrote: > Sometimes I want slapd to stop listening for new connections > to ldap:// and ldaps://, but keep listening to ldapi://, > for maintenance before shutdown. > > One way would be to extend the 'gentlehup' config option > with a list of which URIs it should affect. Or we could > add some sort of 'command language' to cn=config/cn=monitor. > > Or should I play some temporary tricks with iptables or whatever, > so new connections never reach slapd? I've never tried that. Yupp. I'd implement that with temporary local firewall rules suppressing TCP SYN packets. On Linux: iptables --syn. Local firewall rules are a good idea anyway. Ciao, Michael.
Attachment:
smime.p7s
Description: S/MIME Cryptographic Signature