nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

ldap query speed

nicolas_1

Hi,

we have a working 5.9.5 Nuxeo platform connected to Active Directory. Everyhting is fine, but the first connection to Nuxeo is slow (20 seconds, sometimes more), due to the fact that Nuxeo need to populate its ldap cache information. I guess this is due to the size of the Active Directory, We have ~ 10000 users inside.

Is there a way to lower this ldap cache popluation? I tried to change querySizeLimit, cacheMaxSize but it doesn't seems to have significant change.

Regards,

Nicolas Zin

Find more posts tagged with

Comments

pibou_Bouvret

We have the same case here with LDAP, about 50K users and several thousands groups. The worst case is group computation when you access a user profile. The solution was not found through Nuxeo configuration but with a local slave LDAP server

pibou_Bouvret

Forgot to mention that Nuxeo binds to the slave LDAP server with a manager account so that ACLs are not computed. Don't know if that applies to AD.

Anahide_Tchertc

Hi,

There is a way to control this cache size, but there are things you may want to check:

is the cache filled with a lot of entries? (in which case it would be interesting to understand what triggers the loading of all these entries)
bad network access to the LDAP server (that would explain why once entry is in cache, the latency is not visible anymore)