Repository navigation
Add Dereferencing Aliases Setting to LDAP User Federation #39426
szymon-janora
started this conversation in
Ideas
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
The default behavior of Sun's LDAP service provider is "Always dereference aliases", according to https://docs.oracle.com/javase/jndi/tutorial/ldap/misc/aliases.html.
Thus, this property may affect a performance of LDAP search.
For example, in one project, it takes a few seconds to find a user in a SUBTREE search with the "Always dereference aliases" property, while the "Never dereferences aliases" property takes a few milliseconds (Of course, these user entries do not use an alias entry, but there are other alias entries in the SUBTREE that are not related to the user).
In summary, this setting can improve the performance of some projects where user objects are mixed with other allias entries and utilize a SUBTREE search.
All reactions