Last Modified: Jul 12, 2023
Known Affected Versions:
6.0.1, 188.8.131.52, 184.108.40.206, 6.1.0
Opened: Jan 23, 2019 Severity: 4-Minor
When a BIG-IQ user is authenticated against an LDAP auth provider, the auth provider retrieves from the LDAP directory all the groups the user is a member of, to determine authorization. If the directory is very large, the query returns a large amount of data, therefore the operation may be slow, leading to a slow authentication.
The external LDAP directory contains a large number of entries, specifically user groups, which are themselves large.