Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Critical
    • Resolution: Fixed
    • Affects Version/s: 4.11.0, 4.11.2, 4.12.0, 4.13.0, 4.14.0
    • Fix Version/s: 4.14.2
    • Component/s: LDAP
    • Labels:
      None
    • Sprint:
      Leap 2

      Description

      Artifactory's Static group mapping strategy makes searches using a ldap query similar to below.
      ldapsearch -xLLL -H "ldap://10.60.1.88:389" -b "ou=groups,dc=support,dc=sup-docker" "(&(objectClass=groupOfUniqueNames)(|(uniqueMember=uid=kwinters,ou=People,dc=support,dc=sup-docker)(uniqueMember=kwinters)))"

      When a user has many groups and there is no room to optimize the filters anymore, then the login takes a long time to download ALL attributes of the groups that the search returns.

      To enhance this, please make the Artifactory to search only for dn of the group instead of the entire attributes, similar to the query below

      ldapsearch -xLLL -H "ldap://10.60.1.88:389" -b "ou=groups,dc=support,dc=sup-docker" "(&(objectClass=groupOfUniqueNames)(|(uniqueMember=uid=kwinters,ou=People,dc=support,dc=sup-docker)(uniqueMember=kwinters)))" dn

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                yuvalr Yuval Reches
                Reporter:
                joshuah Joshua Han
                Assigned QA:
                Mor Iluz (Inactive)
              • Votes:
                3 Vote for this issue
                Watchers:
                5 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: