In my project I read users at runtime via Ivy API: SecurityContext.findUser("theUser");

This works reasonably well in my company environment. But if I deploy the project the the productive engine (to the cloud) this user lookups can take up to 2 minutes. At least if I search for a not existing user? How can I speed it up? The security system here is configured to use an LDAP. Shouldn't this be a fast protocol?

asked 14.11.2018 at 03:08

SupportIvyTeam's gravatar image

SupportIvyTeam ♦♦
1.4k102118122
accept rate: 77%


Before 7.2:

You can configure additional properties of an security system not that ease, see:

How can I specify additional properties/attributes for an External Security System?

link

answered 14.11.2018 at 09:51

Christian%20Strebel's gravatar image

Christian St... ♦
3.2k31338
accept rate: 88%

7.2 and later:

The solution is to use our cached user lookup: SecurityContext.findUserWithoutLookup("theUser") As the users are synchronized once a day into our cache table, this should be sufficient for most use cases.

An additional improvement for cloud access to a company LDAP is to disable refereal following: "java.naming.referral": ignore

With this setting you speed up the lookup for not existing names as following referalls (browsing attached ADs) could take ages if you come from a different network.

Such a config in 7.2 could look as follows alt text

link

answered 14.11.2018 at 03:10

Reguel%20Wermelinger's gravatar image

Reguel Werme... ♦♦
9.4k31958
accept rate: 70%

edited 26.11.2018 at 10:12

SupportIvyTeam's gravatar image

SupportIvyTeam ♦♦
1.4k102118122

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "Title")
  • image?![alt text](/path/img.jpg "Title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×19

Asked: 14.11.2018 at 03:08

Seen: 1,774 times

Last updated: 26.11.2018 at 10:12