On Windows 2008R2, here are the steps. This needs done on each DC I believe. <div><br></div><div>As administrator in CMD on a DC:</div><div><br></div><div>ntdsutil</div><div>ldap policies</div><div>connections</div><div>connect to server DCNAME</div>
<div>q</div><div>set MaxConnIdleTime to TIMEVALUE (we used 3600 seconds)</div><div>commit changes</div><div>q</div><div>q</div><div><br></div><div>Hope that helps!</div><div class="gmail_extra"><br>-Kyle</div><div class="gmail_extra">
<br><div class="gmail_quote">On Tue, Dec 11, 2012 at 9:10 AM, Matthew M. DeLoera <span dir="ltr">&lt;<a href="mailto:mdeloera@exacq.com" target="_blank">mdeloera@exacq.com</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="word-wrap:break-word"><div>AD has an inactivity/idle default timeout of 900 seconds. I suspect you can google to find the setting name, and where it&#39;s stored, in your AD server(s).</div><div><br></div><div>
Hope that helps.</div><span class="HOEnZb"><font color="#888888"><div><br></div><div>- Matthew</div></font></span><div class="im"><div><br></div><br><div><div>On Dec 10, 2012, at 8:35 PM, Bryce Powell wrote:</div><br><blockquote type="cite">
<span style="border-collapse:separate;font-family:Palatino;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;font-size:medium"><div>
<font face="Calibri, sans-serif"><div><font color="#1F497D">Having done some more research, it appears that Active Directory also has some settings that could result in disconnected connections. I experimented with idle-timeout set to 30 seconds for the LDAP databases, but this seemed to exacerbate the frequency of the errors. The behaviour exhibits as ‘dead’ connections, and LDAP does not appear to attempt to re-establish these connections. Using the CentOS distro of OpenLDAP<span> </span><font face="Calibri, sans-serif" color="#000000">2.4.23</font></font></div>
<div><font face="Calibri, sans-serif" color="#1F497D"> </font></div><div><font color="#1F497D">Here are the slapd.conf settings:</font></div><div><font color="#1F497D"> </font></div><div><font color="#1F497D">database                ldap</font></div>
<div><font color="#1F497D">readonly                on</font></div><div><font color="#1F497D">suffix                  &quot;dc=xyz,dc=local&quot;</font></div><div><font color="#1F497D">#noundeffilter           yes</font></div>
<div><font color="#1F497D">#use-temporary-conn      yes</font></div><div><font color="#1F497D">uri                     &quot;<a>ldap://IP1/</a><span> </span><a>ldap://IP2/</a><span> </span><a>ldap://3/</a><span> </span><a>ldap://IPn/</a>&quot;</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D"> </font></div><div><font face="Calibri, sans-serif" color="#1F497D"> </font></div><div><font color="#1F497D">database                ldap</font></div><div><font color="#1F497D">readonly                on</font></div>
<div><font color="#1F497D">suffix                  &quot;dc=abc,dc=adroot,dc=abc,dc=bc,dc=ca&quot;</font></div><div><font color="#1F497D">#noundeffilter           yes</font></div><div><font color="#1F497D">#use-temporary-conn      yes</font></div>
<div><font color="#1F497D">uri                     &quot;<a>ldap://IP11/</a><span> </span><a>ldap://IP12/</a><span> </span><a>ldap://13/</a><span> </span><a>ldap://IP1n/</a>&quot;</font></div><div><font face="Calibri, sans-serif" color="#1F497D"> </font></div>
<div><font face="Calibri, sans-serif" color="#1F497D"> </font></div><div><font color="#1F497D">I have some rewrite rules for bindDN, searchEntryDN, searchAttrDN, matchedDN, but I don’t believe these settings are relevant to the issue at hand.</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D"> </font></div><div><font color="#1F497D">Essentially I want the connections to be re-established without generating errors.</font></div><div><font face="Calibri, sans-serif" color="#1F497D"> </font></div>
<div><font color="#1F497D">Thanks</font></div><div><font face="Tahoma, sans-serif">____________________________________________</font></div></font></div></span></blockquote></div></div></div></blockquote></div><br></div>