Last Modified: Jun 07, 2019
Opened: Jan 23, 2019
When a BIG-IQ user is authenticated against an LDAP auth provider, the auth provider retrieves from the LDAP directory all the groups the user is a member of, to determine authorization. If the directory is very large, the query returns a large amount of data, therefore the operation may be slow, leading to a slow authentication.
The external LDAP directory contains a large number of entries, specifically user groups, which are themselves large.