On 04/01/17 14:14, A.L.M.Buxey@lboro.ac.uk wrote:
Hi,
using connection pools? the server is used if theres a known connection to it if using stateful methods - eg TCP and SSL...
We are using one connection pool for each of the LDAP servers we have here. They are templated to ensure consistency.
are you using SSL based connections? if so, is your OpenLDAP compiled against OpenSSL or against LibNSS? if the later then theres a hideous pit of incompatibilities (that we hit) that can only be resolved by using a locally compiled version of OpenLDAP compiled against OpenSSL (which results in a pretty flawless pool system).
Yes, we are using SSL. We're using the standard OpenLDAP package distributed with CentOS 7, which is built against libnss. Obviously I prefer to rebuild as little of the system as possible but I'm open to the idea of rebuilding OpenLDAP against OpenSSL if necessary. What problems did you run into? Thanks, Jonathan -- Jonathan Gazeley Senior Systems Administrator IT Services University of Bristol