Bug ID 756283: Faster login to BIG-IQ when using an LDAP auth provider backed by a large directory

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IQ Platform(all modules)

Known Affected Versions:
6.0.1, 6.0.1.1, 6.0.1.2, 6.1.0

Opened: Jan 23, 2019

Severity: 4-Minor

Symptoms

When a BIG-IQ user is authenticated against an LDAP auth provider, the auth provider retrieves from the LDAP directory all the groups the user is a member of, to determine authorization. If the directory is very large, the query returns a large amount of data, therefore the operation may be slow, leading to a slow authentication.

Impact

Slow authentication.

Conditions

The external LDAP directory contains a large number of entries, specifically user groups, which are themselves large.

Workaround

None.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips