Grouper Users - Open Discussion List

[Baron Fujimoto <>]

We're running Grouper 2.2.2 with LDAP (389DS) as a subject source. We were 
previously using Java 1.0.8_212 successfully. However, I recently upgraded 
the instance to use the current version of Java (251), and after doing so 
noticed that while it initially appears to work as expected, the LDAP 
connections eventually begin to time out with the following error:

javax.naming.NamingException: LDAP response read timed out, timeout used:-1ms

The timeouts start to occur after ~20 minutes. Netstat shows no open 
connections to our LDAP at that point.

The grouper host is actually a node in a cluster behind a load balancer, but 
our lb admins can't find any relevant ~20 minute timeout value there.

I've empirically determined that this appears to happen with a version of 
Java 8 higher than 221 (i.e. 231, 241, 251). I dodn't see anything in the JDK 
release notes for 231 that appear to be relevant.
<https://www.oracle.com/technetwork/java/javase/8u-relnotes-2225394.html>

Any suggestions or ideas would be appreciated.

--
UH Information Technology Services : Identity & Access Mgmt, Middleware
minutas cantorum, minutas balorum, minutas carboratum desendus pantorum