diff --git a/ldap/templates/nslcd.conf.erb b/ldap/templates/nslcd.conf.erb
index ac5086d..eb2d67f 100644
--- a/ldap/templates/nslcd.conf.erb
+++ b/ldap/templates/nslcd.conf.erb
@@ -8,6 +8,11 @@ gid ldap
 uri <%= @ldap_uri %>
 base <%= @ldap_basedn %>
 
+# time out searches after 30 seconds
+timelimit 30
+# close idle connections after 10 minutes
+idle_timelimit 600
+
 <% if ['ad','activedirectory'].index(@mapping) -%>
 pagesize 1000
 filter passwd (&(objectClass=user)(!(objectClass=computer))(uidNumber=*))