OID connections from Middle Tiers GROWING (not killed)

Question

Hi everybody,
     We are using Forms/Reports protected by SSO and we seeing GROWING connections from our Middle Tiers to the LDAP (OID). In order of 3 for every user connected and after it exit the connections persist.
This is obviously a problem. In our search we found the following parameters that can be affect the duration of the connections:
OID:
orclLDAPconnTimeOut=n (minutes)
SQLNET.ORA:
names.no_persistent_resources=TRUE
names.directory_path=(tnsnames, ldap, ...)
Can anybody help us in this direction?
1. Why the connections OPEN from MTs can be closed by OID?
2. What is the adequate value for orclLDAPconnTimeOut parameter?
3. What happen if we close the connecton in "orclLDAPconnTimeOut" minutes and the forms still running? Raise an error or reopen a connection?
4. names.no_persistent_resources=TRUE drop the persistent connections from MTs to OID?
Our numbers of users actually are in the order of 1000.
We have 5000 forms and 2000 reports on AS 10gR2 AIX
2 MTs (AIX 5.3 2 CPU 1.5Ghz dual core x 12Gb RAM) x 4 OC4J_BI_FORMS
1 SSO/OID (AIX 5.3 * 2 CPU 1.5Ghz dual core x 12Gb RAM )
Tx in advance for any help.
diego.

Answer 1

Pooled connections and VPD - anyone worked out the architecture to make this work?
I posted a question in XML forum asking for ideas on how to use Virtual Private Database with XSQL or JDBC connection, where the connection is pooled across many users. I have not actually tested out the VPD policy yet, but I can see that each user is getting the same session id (from dbms_unique_session). I am therefore assuming VPD will not work - but haven't got around to testing yet (will very soon though).
OCI seems to address proxy user access but its a leap into another product area (and C) that we don't really want to have to make. And I'm still not sure if this will enable VPD.
null