Re: how to handle connection to server if server runs away?

[Chris R. <chr...@me...>]

"Kurt D. Zeilenga" <Ku...@Op...> wrote:

> I should finish my morning coke before responding...  my suggested
> ping method works well only if that's all you want to do (as it
> returns the session to anonymous status).
>
> As a more general mechanism, I suggest you issue a base
> search upon an empty DN for attributes 1.1.  You should get
> some response.

The amount of response depending on your server vendor's philosophy ;-)

>> I can't think of a simple and portable way to do this in LDAPv2.
>
> Anonymous bind.  In fact, I suggest as a cheap general solution
> for all versions of LDAP.  Anonymous binds are generally quite
> cheap... in fact may be even cheaper than accessing the LDAPv3
> root DSE (depending on implementation).
>
> Kurt
>

Anonymous binds might be prevented by configuration, and some vendors don't 
support multiple binds on the same connection.

Doing a bind also has the nasty side effect of changing your credentials...

Apart from that, yes an anonymous bind is about the cheapest operation you 
can send a server.

Cheers,

Chris