Optimizing IdP's performance

[Daniel Fisher]

On Tue, Aug 2, 2011 at 5:33 AM, Manuel Haim <haim at hrz.uni-marburg.de> wrote:

> Daniel,
>
> >
> > Early versions of the 2.x IDP attempted to use connection pooling for
> > DN resolution, with mixed results due to some bugs. Ultimately we
> > decided it simply violated the stateless nature of JAAS and moved to
> > the current implementation which opens and closes a connection for
> > every DN lookup. Open a feature request for this, it's a good time for
> > me to review this again.
> >
> >
>
> thanks for your comment, I've just added an issue under
> http://code.google.com/p/vt-middleware/issues/detail?id=118
>
>
Thanks. This comment in the issue is disconcerting:

It is indeed the LDAP bind operations reducing performance, each taking
> about 50ms and somehow blocking the whole Shibboleth IdP.


Do you have any logs demonstrating that the IDP is blocking on DN resolution
specifically or JAAS authentication generally?

--Daniel Fisher
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20110802/26a96e54/attachment.html