Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-23943

Group Lookup for Delegated Authentication Directory should not query for all membership attributes

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Medium Medium
    • 5.0
    • 3.5.11
    • None

      Scenario: Delegated Authentication Directory with "Copy Groups on Login"

      When a user logs in, we do N+1 LDAP queries to check for this user's groups, where N = # of groups this user is in.

      This group lookup pulls in all the attributes: This leads to a performance problem if N is very large or if each group has many members.

      It isn't necessary for us to pull in the membership attributes: it's enough for us to check for mere presence of each group: the only attribute we need to return for this purpose is the groupname attribute.

            [CONFSERVER-23943] Group Lookup for Delegated Authentication Directory should not query for all membership attributes

            No work has yet been logged on this issue.

              jwalton joe
              twong Tim Wong (Inactive)
              Affected customers:
              3 This affects my team
              Watchers:
              15 Start watching this issue

                Created:
                Updated:
                Resolved: