Re: [Bodington-developers] LDAP Authentication - OpenLDAP versus JNDI

[Jon M. <jo...@te...>]

Peter Crowther wrote:
>> From: Jon Maber
>> if you resolve a host name it doesn't take any longer 
>> to get all the IP numbers - a single response packet lists 
>> them all. (In 
>> fact a suspect that the same call is made and that the Java 
>> method that fetches one IP number just discards the others.)
>>     
>
> Memory says you're right, and that a DNS client RFC-SHOULD contact the
> addresses in order - so the call that returns a single address should
> return the first one.  However, I'm doing this from memory without the
> spec in front of me.
>
>   
>> I don't think that the 
>> Leeds DNS is clever enough to change the order of the IP 
>> numbers so I've 
>> implemented a cycle in the authenticator that balances the load.
>>     
>
> Makes sense.  I assume you also refuse to contact failed servers for a
> period after detecting the failure?
>   
I haven't done that bit yet.  That might be an eleventh hour activity....