Bug ID 634022: Active Directory authentication with Step-Up-Auth has degraded performance.

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1

Fixed In:
13.1.0

Opened: Dec 16, 2016

Severity: 3-Major

Symptoms

When using Active Directory to perform Step-Up-Authentication with APM, the number of authentications per second that APM can sustain is lower than what could be achieved with earlier releases. This is observed only on certain high end appliance platforms.

Impact

Performance in terms of authentications per second is degraded.

Conditions

All the following must be true: - APM is provisioned and configured to provide authentication services via the per-request access policy. - Active Directory is used as the authentication method. - A relatively high rate of authentication exists. - One of the following BIG-IP appliances is in use: i108xx i78xx 10xxx

Workaround

None.

Fix Information

None.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips