LDAP timeout parameters for ISAM and SAM components.

Resolving The Problem

LDAP timeout parameters for the TAM policy server and TAM components (blades), should be placed in the applicable conf file within the conf file's [ldap] stanza... for example:

TAM/ISAM Policy Server : ivmgrd.conf

TAM/ISAM Authorization Server: ivacld.conf

WebSEAL server : webseald-<instance>.conf

TAMOS (PDOS) Client : pdosd.conf

** The LDAP timeout parameters should not be placed in ldap.conf, as this will have no effect...

** For clarity, it is recommended to add the LDAP timeout parameters under the [ldap] stanza of the applicable component conf file (if the parameters are not already included).

An explanation for the parameters is as follows:

timeout = <seconds>
search-timeout = <seconds>
authn-timeout = <seconds>

"timeout = {0|number_seconds}
Amount of time (in seconds) that is allowed for authentication or search operations before the LDAP server is considered to be down. If specified, a value for the stanza entries authn-timeout = or search-timeout = overrides the value of this stanza entry.

authn-timeout = {0|number_seconds}
Amount of time (in seconds) that will be allowed for authentication operations before the LDAP server is considered to be down. If specified, this value overrides any value of timeout = for authentication operations.

search-timeout = {0|number_seconds}
Amount of time (in seconds) that will be allowed for search operations before the LDAP server is considered to be down. If specified, this value overrides any value of timeout = for search operations.

------------------------------------