So shall I open a RFE against openldap then?Well, the real issue here is that the openldap client libraries that we're using are returning a generic error instead of reporting that the connection was terminated.
I do not think this is the best approach - imagine 100+ client machines bound simultaneously to the single LDAP server. It can easily run out of resources.We don't really want to implement an internal timeout (we actually retain the connection on purpose, so we don't have to go through the slow ldap bind on every request). What we want is to be able to notice that we received an idle disconnect from the server and reconnect (rather than doing what we do now, which is treat it as if the server has become unavailable and fail over to the next one).