svn commit: r902605 - /httpd/httpd/trunk/docs/manual/mod/mod_ldap.xml

[sf...@apache.org]

Author: sf
Date: Sun Jan 24 17:27:41 2010
New Revision: 902605

URL: http://svn.apache.org/viewvc?rev=902605&view=rev
Log:
Note that a firewall silently dropping packets is a mis-configuration.

Modified:
    httpd/httpd/trunk/docs/manual/mod/mod_ldap.xml

Modified: httpd/httpd/trunk/docs/manual/mod/mod_ldap.xml
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/docs/manual/mod/mod_ldap.xml?rev=902605&r1=902604&r2=902605&view=diff
==============================================================================
--- httpd/httpd/trunk/docs/manual/mod/mod_ldap.xml (original)
+++ httpd/httpd/trunk/docs/manual/mod/mod_ldap.xml Sun Jan 24 17:27:41 2010
@@ -663,7 +663,9 @@
     the LDAP_OPT_TIMEOUT option in the underlying LDAP client library, when available.</p>
 
     <p> If the timeout expires, httpd will retry in case an existing connection has
-    been silently dropped by a firewall.</p>
+    been silently dropped by a firewall. However, performance will be much better if
+    the firewall is configured to send TCP RST packets instead of silently dropping
+    packets.</p>
 
     <note>
     <p>Timeouts for ldap compare operations requires an SDK with LDAP_OPT_TIMEOUT, such as OpenLDAP &gt;= 2.4.4.</p>