Long timeouts ldap client login

[Commander Keen]

Ok, so here’s my problem.
My clients are configured to contact the ldap-server and remotly do their authentication (Kerberos or SASL)

When they have an open internet connection (in lan or at home via vpn) there’s no problem.
When they don’t have internet connection the authentication is done locally, so no problem there either.

The problem rises when the system senses a connection to the internet, but it can’t reach our ldap-server.
For instance because the lan they are working in has a firewall the blocks that kind of traffic.

The timeouts when that happens are very long (for about 10 minutes), before the system decides to do the authentication locally.

Is there any way to reduce these waiting times?
Or to control this?

Normally if, after 2 retries (for instance) still no ldap-server can be reached he should switch to local authentication. This should only take about 2 seconds…

Any ideas?

Thanks a lot

Best regards

[Author]

Posts