Uploaded image for project: 'Crowd Data Center'
  1. Crowd Data Center
  2. CWD-1338

Investigate AD over SSL performance in Crowd

XMLWordPrintable

    • 3

    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

      AD over SSL is noticeably slower in Crowd than non-SSL connections. We should run tests with profiling to further investigate the cause and possible options for further optimization. Perhaps this is a problem with Spring LDAP and SSL?

            [CWD-1338] Investigate AD over SSL performance in Crowd

            Katherine Yabut made changes -
            Workflow Original: JAC Suggestion Workflow [ 3388797 ] New: JAC Suggestion Workflow 3 [ 3630844 ]
            Status Original: RESOLVED [ 5 ] New: Closed [ 6 ]
            Monique Khairuliana (Inactive) made changes -
            Workflow Original: Simplified Crowd Development Workflow v2 [ 1391098 ] New: JAC Suggestion Workflow [ 3388797 ]
            Assignee Original: David O'Flynn [Atlassian] [ doflynn ]
            Issue Type Original: Improvement [ 4 ] New: Suggestion [ 10000 ]
            Owen made changes -
            Workflow Original: Crowd Development Workflow v2 [ 272098 ] New: Simplified Crowd Development Workflow v2 [ 1391098 ]
            jawong.adm made changes -
            Workflow Original: Feature Request Workflow [ 173789 ] New: Crowd Development Workflow v2 [ 272098 ]
            David O'Flynn [Atlassian] made changes -
            Fix Version/s New: 2.1 [ 14496 ]
            Resolution New: Fixed [ 1 ]
            Status Original: Open [ 1 ] New: Resolved [ 5 ]

            David O'Flynn [Atlassian] added a comment -

            AD with SSL and without are comparable in performance in Crowd 2.1+, due to connection pooling.

            David O'Flynn [Atlassian] added a comment - AD with SSL and without are comparable in performance in Crowd 2.1+, due to connection pooling.

            jonathan doklovic added a comment -

            I should mention, we're using Crowd 1.6.1 and Jira 3.13.2

            jonathan doklovic added a comment - I should mention, we're using Crowd 1.6.1 and Jira 3.13.2

            jonathan doklovic added a comment -

            I am having a similar issue.
            We have Crowd, Jira, and AD on separate servers.
            Crowd is connecting to AD over SSL.
            In the crowd admin, everything is speedy, however any requests in jira that look up a user (login, admin, browse project, etc) are EXTREMELY slow.

            From the crowd server console, I can see it sending literally thousands of ssl cert requests.
            In the crowd log, I see entries like this over and over again for a single request:

            2009-06-24 18:15:12,310 http-8095-Processor23 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing principal search: baseDN = DC=crowdad-qa, DC=com - filter = (&(objectCategory=Person)(sAMAccountName=*))
            2009-06-24 18:15:13,104 http-8095-Processor25 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing group relationship search: baseDN = OU=Groups,OU=Crowd,OU=Security,DC=crowdad-qa, DC=com
            2009-06-24 18:15:13,478 http-8095-Processor23 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing principal search: baseDN = DC=crowdad-qa, DC=com - filter = (&(sAMAccountName=kberg)(&(objectCategory=Person)(sAMAccountName=*)))
            2009-06-24 18:15:14,151 http-8095-Processor23 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing group search: baseDN = OU=Groups,OU=Crowd,OU=Security,DC=crowdad-qa, DC=com - filter = (&(objectCategory=Group)(cn=jira-developers))
            2009-06-24 18:15:31,766 http-8095-Processor25 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing principal search: baseDN = DC=crowdad-qa, DC=com - filter = (&(sAMAccountName=jdoklovic)(&(objectCategory=Person)(sAMAccountName=*)))
            2009-06-24 18:15:32,408 http-8095-Processor25 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing principal search: baseDN = DC=crowdad-qa, DC=com - filter = (&(sAMAccountName=jdoklovic)(&(objectCategory=Person)(sAMAccountName=*)))
            2009-06-24 18:15:34,424 http-8095-Processor23 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing principal search: baseDN = DC=crowdad-qa, DC=com - filter = (&(sAMAccountName=dch)(&(objectCategory=Person)(sAMAccountName=*)))
            2009-06-24 18:15:35,176 http-8095-Processor23 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing group search: baseDN = OU=Groups,OU=Crowd,OU=Security,DC=crowdad-qa, DC=com - filter = (&(objectCategory=Group)(cn=jira-developers))
            2009-06-24 18:15:53,019 http-8095-Processor21 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing principal search: baseDN = DC=crowdad-qa, DC=com - filter = (&(sAMAccountName=jchan)(&(objectCategory=Person)(sAMAccountName=*)))
            2009-06-24 18:15:53,733 http-8095-Processor21 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing group search: baseDN = OU=Groups,OU=Crowd,OU=Security,DC=crowdad-qa, DC=com - filter = (&(objectCategory=Group)(cn=jira-developers))
            2009-06-24 18:16:11,598 http-8095-Processor23 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing principal search: baseDN = DC=crowdad-qa, DC=com - filter = (&(sAMAccountName=kbehrens)(&(objectCategory=Person)(sAMAccountName=*)))
            2009-06-24 18:16:12,238 http-8095-Processor23 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing group search: baseDN = OU=Groups,OU=Crowd,OU=Security,DC=crowdad-qa, DC=com - filter = (&(objectCategory=Group)(cn=jira-developers))
            2009-06-24 18:16:31,161 http-8095-Processor21 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing principal search: baseDN = DC=crowdad-qa, DC=com - filter = (&(sAMAccountName=jdoklovic)(&(objectCategory=Person)(sAMAccountName=*)))
            2009-06-24 18:16:31,799 http-8095-Processor21 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing group search: baseDN = OU=Groups,OU=Crowd,OU=Security,DC=crowdad-qa, DC=com - filter = (&(objectCategory=Group)(cn=jira-administrators))
            2009-06-24 18:16:34,990 http-8095-Processor25 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing principal search: baseDN = DC=crowdad-qa, DC=com - filter = (&(sAMAccountName=jdoklovic)(&(objectCategory=Person)(sAMAccountName=*)))
            2009-06-24 18:16:35,631 http-8095-Processor25 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing group search: baseDN = OU=Groups,OU=Crowd,OU=Security,DC=crowdad-qa, DC=com - filter = (&(objectCategory=Group)(cn=autonomy))
            2009-06-24 18:16:37,082 http-8095-Processor23 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing principal search: baseDN = DC=crowdad-qa, DC=com - filter = (&(sAMAccountName=jdoklovic)(&(objectCategory=Person)(sAMAccountName=*)))
            2009-06-24 18:16:37,810 http-8095-Processor23 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing group search: baseDN = OU=Groups,OU=Crowd,OU=Security,DC=crowdad-qa, DC=com - filter = (&(objectCategory=Group)(cn=redesign))
            2009-06-24 18:16:39,389 http-8095-Processor25 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing group search: baseDN = OU=Groups,OU=Crowd,OU=Security,DC=crowdad-qa, DC=com - filter = (&(objectCategory=Group)(cn=jira-administrators))
            2009-06-24 18:16:42,579 http-8095-Processor23 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing principal search: baseDN = DC=crowdad-qa, DC=com - filter = (&(sAMAccountName=jdoklovic)(&(objectCategory=Person)(sAMAccountName=*)))

            It's basically pounding on AD and I can't figure out why. I'm not doing a user search or anything, so why does it keep looking up a whole bunch of users with each request?

            jonathan doklovic added a comment - I am having a similar issue. We have Crowd, Jira, and AD on separate servers. Crowd is connecting to AD over SSL. In the crowd admin, everything is speedy, however any requests in jira that look up a user (login, admin, browse project, etc) are EXTREMELY slow. From the crowd server console, I can see it sending literally thousands of ssl cert requests. In the crowd log, I see entries like this over and over again for a single request: 2009-06-24 18:15:12,310 http-8095-Processor23 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing principal search: baseDN = DC=crowdad-qa, DC=com - filter = (&(objectCategory=Person)(sAMAccountName=*)) 2009-06-24 18:15:13,104 http-8095-Processor25 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing group relationship search: baseDN = OU=Groups,OU=Crowd,OU=Security,DC=crowdad-qa, DC=com 2009-06-24 18:15:13,478 http-8095-Processor23 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing principal search: baseDN = DC=crowdad-qa, DC=com - filter = (&(sAMAccountName=kberg)(&(objectCategory=Person)(sAMAccountName=*))) 2009-06-24 18:15:14,151 http-8095-Processor23 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing group search: baseDN = OU=Groups,OU=Crowd,OU=Security,DC=crowdad-qa, DC=com - filter = (&(objectCategory=Group)(cn=jira-developers)) 2009-06-24 18:15:31,766 http-8095-Processor25 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing principal search: baseDN = DC=crowdad-qa, DC=com - filter = (&(sAMAccountName=jdoklovic)(&(objectCategory=Person)(sAMAccountName=*))) 2009-06-24 18:15:32,408 http-8095-Processor25 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing principal search: baseDN = DC=crowdad-qa, DC=com - filter = (&(sAMAccountName=jdoklovic)(&(objectCategory=Person)(sAMAccountName=*))) 2009-06-24 18:15:34,424 http-8095-Processor23 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing principal search: baseDN = DC=crowdad-qa, DC=com - filter = (&(sAMAccountName=dch)(&(objectCategory=Person)(sAMAccountName=*))) 2009-06-24 18:15:35,176 http-8095-Processor23 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing group search: baseDN = OU=Groups,OU=Crowd,OU=Security,DC=crowdad-qa, DC=com - filter = (&(objectCategory=Group)(cn=jira-developers)) 2009-06-24 18:15:53,019 http-8095-Processor21 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing principal search: baseDN = DC=crowdad-qa, DC=com - filter = (&(sAMAccountName=jchan)(&(objectCategory=Person)(sAMAccountName=*))) 2009-06-24 18:15:53,733 http-8095-Processor21 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing group search: baseDN = OU=Groups,OU=Crowd,OU=Security,DC=crowdad-qa, DC=com - filter = (&(objectCategory=Group)(cn=jira-developers)) 2009-06-24 18:16:11,598 http-8095-Processor23 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing principal search: baseDN = DC=crowdad-qa, DC=com - filter = (&(sAMAccountName=kbehrens)(&(objectCategory=Person)(sAMAccountName=*))) 2009-06-24 18:16:12,238 http-8095-Processor23 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing group search: baseDN = OU=Groups,OU=Crowd,OU=Security,DC=crowdad-qa, DC=com - filter = (&(objectCategory=Group)(cn=jira-developers)) 2009-06-24 18:16:31,161 http-8095-Processor21 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing principal search: baseDN = DC=crowdad-qa, DC=com - filter = (&(sAMAccountName=jdoklovic)(&(objectCategory=Person)(sAMAccountName=*))) 2009-06-24 18:16:31,799 http-8095-Processor21 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing group search: baseDN = OU=Groups,OU=Crowd,OU=Security,DC=crowdad-qa, DC=com - filter = (&(objectCategory=Group)(cn=jira-administrators)) 2009-06-24 18:16:34,990 http-8095-Processor25 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing principal search: baseDN = DC=crowdad-qa, DC=com - filter = (&(sAMAccountName=jdoklovic)(&(objectCategory=Person)(sAMAccountName=*))) 2009-06-24 18:16:35,631 http-8095-Processor25 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing group search: baseDN = OU=Groups,OU=Crowd,OU=Security,DC=crowdad-qa, DC=com - filter = (&(objectCategory=Group)(cn=autonomy)) 2009-06-24 18:16:37,082 http-8095-Processor23 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing principal search: baseDN = DC=crowdad-qa, DC=com - filter = (&(sAMAccountName=jdoklovic)(&(objectCategory=Person)(sAMAccountName=*))) 2009-06-24 18:16:37,810 http-8095-Processor23 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing group search: baseDN = OU=Groups,OU=Crowd,OU=Security,DC=crowdad-qa, DC=com - filter = (&(objectCategory=Group)(cn=redesign)) 2009-06-24 18:16:39,389 http-8095-Processor25 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing group search: baseDN = OU=Groups,OU=Crowd,OU=Security,DC=crowdad-qa, DC=com - filter = (&(objectCategory=Group)(cn=jira-administrators)) 2009-06-24 18:16:42,579 http-8095-Processor23 INFO [integration.directory.connector.MicrosoftActiveDirectory] Performing principal search: baseDN = DC=crowdad-qa, DC=com - filter = (&(sAMAccountName=jdoklovic)(&(objectCategory=Person)(sAMAccountName=*))) It's basically pounding on AD and I can't figure out why. I'm not doing a user search or anything, so why does it keep looking up a whole bunch of users with each request?
            Support Count Updater made changes -
            Support reference count New: 3
            Justin Koke made changes -
            Workflow Original: jira [ 148901 ] New: Feature Request Workflow [ 173789 ]

              Unassigned Unassigned
              donna@atlassian.com DonnaA
              Votes:
              1 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: