Fast LDAP user lookup at runtime

In my project I read users at runtime via Ivy API: SecurityContext.findUser("theUser");

This works reasonably well in my company environment. But if I deploy the project the the productive engine (to the cloud) this user lookups can take up to 2 minutes. At least if I search for a not existing user? How can I speed it up? The security system here is configured to use an LDAP. Shouldn't this be a fast protocol?

ldap

asked 14.11.2018 at 03:08

SupportIvyTeam ♦♦
1.4k●102●118●122
accept rate: 77%

2 Answers:

active answers oldest newest most voted

1	Before 7.2: You can configure additional properties of an security system not that ease, see: How can I specify additional properties/attributes for an External Security System? link answered 14.11.2018 at 09:51 Christian St... ♦ 3.2k●3●13●38 accept rate: 88%

7.2 and later:

The solution is to use our cached user lookup: SecurityContext.findUserWithoutLookup("theUser") As the users are synchronized once a day into our cache table, this should be sufficient for most use cases.

An additional improvement for cloud access to a company LDAP is to disable refereal following: "java.naming.referral": ignore

With this setting you speed up the lookup for not existing names as following referalls (browsing attached ADs) could take ages if you come from a different network.

Such a config in 7.2 could look as follows alt text

link

answered 14.11.2018 at 03:10

Reguel Werme... ♦♦
9.4k●3●19●58
accept rate: 70%

edited 26.11.2018 at 10:12

SupportIvyTeam ♦♦
1.4k●102●118●122

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

*italic* or _italic_
**bold** or __bold__
link:[text](http://url.com/ "Title")
image?![alt text](/path/img.jpg "Title")
numbered list: 1. Foo 2. Bar
to add a line break simply add two spaces to where you would like the new line to be.
basic HTML tags are also supported

learn more about Markdown

Tags:

ldap ×19

Asked: 14.11.2018 at 03:08

Seen: 1,774 times

Last updated: 26.11.2018 at 10:12

Fast LDAP user lookup at runtime

Follow this question

Related questions