Uploaded image for project: 'Confluence Server'
  1. Confluence Server
  2. CONFSERVER-23943

Group Lookup for Delegated Authentication Directory should not query for all membership attributes

    XMLWordPrintable

    Details

      Description

      Scenario: Delegated Authentication Directory with "Copy Groups on Login"

      When a user logs in, we do N+1 LDAP queries to check for this user's groups, where N = # of groups this user is in.

      This group lookup pulls in all the attributes: This leads to a performance problem if N is very large or if each group has many members.

      It isn't necessary for us to pull in the membership attributes: it's enough for us to check for mere presence of each group: the only attribute we need to return for this purpose is the groupname attribute.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              jwalton Joseph Walton
              Reporter:
              twong Tim Wong (Inactive)
              Votes:
              3 Vote for this issue
              Watchers:
              15 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: