Re: (ITS#6320)

[michael@stroeder.com]

j@telepaths.org wrote:
> On Oct 2, 2009, at 23:00 , Howard Chu wrote:
> 
>> j@telepaths.org wrote:
>>> My last email was likely indecipherable, so re-sending as plain text:
>>>
>>> #####
>>>
>>> This may sound like a strange question, but couldn't seem to find the
>>> answer in the docs:
>>>
>>> Would the global "idletimeout" parameter interfere with
>>> 'refreshAndPersist' operations in any way?
>> No, that would be stupid.
>>
> Yes Howard -- that would be incredibly stupid. But I had to ask.
> [..]
> SOME of the servers receiving updates are separated by firewalls,  
> yes ... HOWEVER (a) there are special policies in place, allowing  
> these hosts to communicate via LDAP[S]; this can be confirmed by  
> running ldapsearch routines from every possible vantage point TO every  
> possible provider, etc.,

Note that firewalls are doing connection tracking enforcing their own timeouts
for idle connections. So please check whether the firewall configuration
really matches your slapd idle timeout requirements.

Ciao, Michael.