Uploaded image for project: 'Artifactory Binary Repository'
  1. Artifactory Binary Repository
  2. RTFACT-17836

Add a cache for LDAP authentication get all groups calls

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Normal
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 6.6.0, 6.5.8
    • Component/s: None
    • Labels:
      None

      Description

      Motivation
      LDAP authentication currently request 1-3 times to get all groups.
      this may cause to way to much requests reach access for just getting the associated imported LDAP groups.

      Solution
      LDAP authentication should use a cache for all imported LDAP groups, with a default TTL of 1 minute, configurable in artifactory.system.property under artifactory.security.ldap.group.cacheRetentionSecs=60  [secs])

      Stress test+s
      +3000 imported LDAP groups, 100 GET requests (not cached, without API auth cache) in a concurrency of 20 showed increase in about 1.5-5 times faster requests.

      50% of the requests were served in ~180ms with the fix, ~360ms without

        Attachments

          Activity

            People

            • Assignee:
              nadavy Nadav Yogev
              Reporter:
              nadavy Nadav Yogev
              Assigned QA:
              Tamir Hadad
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: