Return
-
Title
How to optimize your LDAP search process to avoid performance issues on authentication process -
Description
It may be noted that the KACE SMA login time is longer when LDAP Authentication is chosen over Local Authentication. Though there can be multiple causes, one of the causes could include non-optimal ordering of LDAP authentication servers. Listing the broadest filters first may cause slower login times for smaller groups of users. -
Cause
When using LDAP server to authenticate users, KACE SMA searches for login information on every server set, that way if LDAP server for one administrator - for example - is on third place, KACE SMA will search for that user on previous servers before searching the Administrator Server, this is:
The appliance will search for account on Read Only Administrator Server, then User Server and then on Administrator Server, this process can increase the response waiting time
-
Resolution
To change the order of the LDAP authentication servers:
- Go to Settings | User Authentication
- Left-click on the icon with a list and an arrow until the desired authentication server is in the desired order
- Repeat step two for each desired authentication server until they are all in the desired order
- The K1000 will search each authentication server in order, based on this list
- Following the previous example, the order below might be a more optimal configuration. The Administrator Server should have less users than User Server does, so this will be a less time consuming process to locate an user within Administrator Server if it is first in order:
Note: Ordering is an environment specific preference and the above is only one possible scenario and example.