httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Jess Holle <je...@ptc.com>
Subject Re: Time for 2.0.53?
Date Tue, 01 Feb 2005 16:17:00 GMT
I hate to say it but any solution would be appreciated.

This is the one brick wall customers are running into when trying to use 
Apache (with mod_auth_ldap and mod_jk being the heaviest dependencies 
beyond core functionality).

--
Jess Holle

Brad Nicholes wrote:

>   I have already added a new directive to util_ldap called
>LDAPConnectionTimeout (
>http://httpd.apache.org/docs-2.1/mod/mod_ldap.html#ldapconnectiontimeout
>) which allows util_ldap to set the network timeout through
>
>rc = apr_ldap_set_option(p, NULL, LDAP_OPT_NETWORK_TIMEOUT,
>                                 (void *)&timeOut, &(result_err));
>
>The default is 10 seconds, but this directive will allow the
>administrator to set it to whatever they want.  See the STATUS file
>backport entry (svn rev 126565).  This should be a much cleaner way to
>handle connection timeouts although I think that the whole connection
>pool itself should be converted to using apr_reslist_*.   
>
>I have also considered adding a similar directive to set the search
>timelimit (LDAP_OPT_TIMELIMIT), but I haven't decided if just setting a
>global time limit is a good thing or not.  It seems like this should be
>more of a per-request type of setting and also really depends on the
>size of the LDAP context that is being searched.
>
>thoughts?
>
>Brad
>
>
>
>  
>
>>>>minfrin@sharp.fm Tuesday, February 01, 2005 8:55:24 AM >>>
>>>>        
>>>>
>Jess Holle said:
>
>  
>
>>I don't have a vote, but I believe the socket timeout configuration
>>    
>>
>is
>  
>
>>necessary to address issues seen with firewall timeouts and the LDAP
>>connections held open by Apache.
>>    
>>
>
>Is there an outstanding patch for this yet?
>
>The right way to solve this problem is to allocate the LDAP connection
>pool using apr_reslist_*, which handles things like connection
>timeouts
>for us.
>
>If this code exists already, then I'm keen to get it in ASAP, and if
>the
>code doesn't exist I should have time to fix it after tomorrow.
>
>Regards,
>Graham
>--
>
>  
>


Mime
View raw message