Bug ID 756283: Faster login to BIG-IQ when using an LDAP auth provider backed by a large directory

Last Modified: Jun 07, 2019

Bug Tracker

Affected Product:  See more info
BIG-IQ Platform(all modules)

Known Affected Versions:
6.0.0, 6.0.1, 6.1.0

Opened: Jan 23, 2019
Severity: 4-Minor

Symptoms

When a BIG-IQ user is authenticated against an LDAP auth provider, the auth provider retrieves from the LDAP directory all the groups the user is a member of, to determine authorization. If the directory is very large, the query returns a large amount of data, therefore the operation may be slow, leading to a slow authentication.

Impact

Slow authentication.

Conditions

The external LDAP directory contains a large number of entries, specifically user groups, which are themselves large.

Workaround

None.

Fix Information

None

Behavior Change