Re: [Bodington-developers] LDAP Authentication - OpenLDAP versus JNDI

[Jon M. <jo...@te...>]

Alistair Young wrote:
> ah, ok, that makes sense. The current one just polls based on what it  
> finds in the xml conf file. Are you suggesting it should further  
> expand it's list by finding out if any of those servers are dns round- 
> robins? Should make it an option rather than hard wired as some sites  
> dns resolving is insanely slow.
>   
I assume that if you use a numerical host that will avoid the DNS 
lookup.  However, if you resolve a host name it doesn't take any longer 
to get all the IP numbers - a single response packet lists them all. (In 
fact a suspect that the same call is made and that the Java method that 
fetches one IP number just discards the others.) I don't think that the 
Leeds DNS is clever enough to change the order of the IP numbers so I've 
implemented a cycle in the authenticator that balances the load.

Jon