lists.arthurdejong.org
RSS feed

Re: [nssldap] Confused in bind_policy hard/soft in ldap.conf for multiple URI's

[Date Prev][Date Next] [Thread Prev][Thread Next]

Re: [nssldap] Confused in bind_policy hard/soft in ldap.conf for multiple URI's




Jim Willeke wrote:
> 
> The setting deals with the LDAP Client and not with the NSS settings.
> 
> AFAIK, hard (the default) implies that on any QUERY will wait a really
> long
> time.
> The algorithm for "a really long time" varies depending on distribution.
> 
> "soft" means the query returns failed immediately.
> 
> Using "hard" can cause problems as LDAP may not be ready on startup and
> the
> order of component startup can be an issue.
> 
> The setting only deals with "queries" not the bind_timelimit, and does not
> determine if the system will or will not fail-over to the second system.
> 
> There are no "tunable" parameters on any distributions I am aware for the
> time in the settings.
> 
> -jim
> Jim Willeke
> 
> 

So, if I always use 'soft' what would I loose ?
When I was experimenting, I observed that with 'hard' it goes into
exponential sleep and then tries again but not with 'soft'
But never observed that it failed to fetch info, if the first server was
down [Does that mean that what was stated in the link I pointed to was wrong
??]

Would we still see a fallback to another server, if the first server is up
but doesn't have the required data ?

I found these parameters for tuning:

#nss_reconnect_tries 1 # number of times to double the sleep time
#nss_reconnect_sleeptime 1 # initial sleep value
#nss_reconnect_maxsleeptime 1 # max sleep value to cap at
#nss_reconnect_maxconntries 3 # how many tries before sleeping

Should I be using these ?