LDAP Errors / Warnings

[shawnroach]

Hi everyone! A client and I recently got their LDAP integration up and running. Almost everything seems to be working very well. However, we are getting the same two errors in the Error logs. They appear as often as every 4 to 5 minutes, and as far apart as 90 to 120 minutes. The messages in the error logs are:

LDAP exception validating object:Read timed out
LDAP exception validating object:LDAP response read timed out, timeout used:30000ms.

I cannot say for certain if these are the culprits, but we've had to restart the instance once due to Scheduled Jobs not running...choking.
I've dug deeper into the log entries and see no errors. These warnings are everywhere, though:

WARNING *** WARNING *** Invalid macro tag encountered: elevate_privilege
WARNING *** WARNING *** Invalid macro tag encountered: open_archive
WARNING *** WARNING *** Invalid macro tag encountered: domain_select
WARNING *** WARNING *** Invalid macro tag encountered: domain_reference_picker
WARNING *** WARNING *** Invalid macro tag encountered: encryption_select

Can anyone provide assistance and/or knowledge on this situation, please?

Thank you!

Shawn Roach | Technical Analyst
Fruition Partners | 200 S. Wacker Ste. 3100 Chicago, IL 60606
P: 816-616-7818 | shawn.roach@fruitionpartners.com
fruitionpartners.com | Trusted Advisors for IT Service Management

[tpritch]

Yea. I saw that part. I've set my LDAP and the ssl property to a value of 50 but the errors are still coming in. I was curious about what Roach used to clear up the errors in his instance.

[tony_barratt]

Hi Tom,

50 sec for a read timeout is not huge. Especially if you are using a MID-server - are you?

You could increase to 100 for com.glide.ssl.read.timeout and LDAP read timeout or even more if you have MID Server deployed.

Not necessarily for ever but as a diagnostic step.

What error do you see in the logs?

Have you carried out a LDAP GUI test connection?

For each of the OUs?

Best Regards

Tony

[tpritch]

Tony,

The connection tests fine (except for Example LDAP). Here is the error that prompted me to investigate.

LDAP exception validating object:Read timed out: no thrown error

I thought for a moment that it was caused by the Example LDAP server which appears to have been listening. Tests show that it actually isn't the case. I wish the error contained more data. (sigh)

[tony_barratt]

Hi Tom,

When you carried out "Test connection" for each of the LDAP OU Definitions, was one of them noticeably slower that the others? Not sure that will help but there may be an indication there.

Best Regards

Tony

[tpritch]

Hi Tony,

I wasn't attentive enough to that aspect of the test. I ran it again: One was ~2.5 seconds. The other ~2.3 seconds. As stated earlier, the Example server record times out; I've since turned off the listener for that.