----- Missatge original ----- > On 10/19/2010 12:11 PM, Gerrard Geldenhuis wrote: > > Hi We have recently seen an issue were a single client opened up > > more than 800 established connections to our directory server. The > > client did have the proper settings configured and should have > > closed connections but it did'nt. Is there a way to limit the amount > > of connections per client or close connections from the server side > > after a certain period? Without just making the amount of > > connections ridicuosly high on the directory server how can you > > safeguard against rogue clients. > > > > Our client setting is as follows: > > idle_timelimit 5 > > timelimit 10 > > bind_timelimit 5 > > > > We were unable to log into client and it had file system issues so > > we could not do any further analyses there. > > > > I suspect that solutions to this problem probably falls outside of > > what can be configured in 389? > > While it's not a 389-specific suggestion, iptables could easily solve > this problem for you across the board. :) > there's also a setting to close idle connections after X seconds. is somewhere in the 389 console, i can't remember now exactly. abosch
