Re: [Bodington-developers] LDAP Authentication - OpenLDAP versus JNDI

[Peter C. <Pet...@me...>]

> From: Jon Maber
> if you resolve a host name it doesn't take any longer=20
> to get all the IP numbers - a single response packet lists=20
> them all. (In=20
> fact a suspect that the same call is made and that the Java=20
> method that fetches one IP number just discards the others.)

Memory says you're right, and that a DNS client RFC-SHOULD contact the
addresses in order - so the call that returns a single address should
return the first one.  However, I'm doing this from memory without the
spec in front of me.

> I don't think that the=20
> Leeds DNS is clever enough to change the order of the IP=20
> numbers so I've=20
> implemented a cycle in the authenticator that balances the load.

Makes sense.  I assume you also refuse to contact failed servers for a
period after detecting the failure?

		- Peter