Uploaded image for project: 'Artifactory Binary Repository'
  1. Artifactory Binary Repository
  2. RTFACT-12365

Improve LDAP Group query speed for LDAP Login

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Critical
    • Resolution: Fixed
    • Affects Version/s: 4.11.0, 4.11.2, 4.12.0, 4.13.0, 4.14.0
    • Fix Version/s: 4.14.2
    • Component/s: LDAP
    • Labels:
      None

      Description

      Artifactory's Static group mapping strategy makes searches using a ldap query similar to below.
      ldapsearch -xLLL -H "ldap://10.60.1.88:389" -b "ou=groups,dc=support,dc=sup-docker" "(&(objectClass=groupOfUniqueNames)(|(uniqueMember=uid=kwinters,ou=People,dc=support,dc=sup-docker)(uniqueMember=kwinters)))"

      When a user has many groups and there is no room to optimize the filters anymore, then the login takes a long time to download ALL attributes of the groups that the search returns.

      To enhance this, please make the Artifactory to search only for dn of the group instead of the entire attributes, similar to the query below

      ldapsearch -xLLL -H "ldap://10.60.1.88:389" -b "ou=groups,dc=support,dc=sup-docker" "(&(objectClass=groupOfUniqueNames)(|(uniqueMember=uid=kwinters,ou=People,dc=support,dc=sup-docker)(uniqueMember=kwinters)))" dn

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              yuvalr Yuval Reches
              Reporter:
              joshuah Joshua Han
              Votes:
              3 Vote for this issue
              Watchers:
              5 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: