IDP Login Delay Question

[Joseph Lucia]

Daniel,

Thanks for your response, I did an ldap search and my results were within
a fraction of a second. The same behavior I see when the process gets
beyond whatever is holding it up.

Regards,

Joseph Lucia
Information Systems Specialist
Central York School District
717-846-6789 x1211
jlucia at cysd.k12.pa.us






On Mar 26, 2014 ~ Mar 26, 2014 ~ 8:02 AM 8:02 AM, "Daniel Fisher"
<dfisher at vt.edu> wrote:

>On Tue, Mar 25, 2014 at 12:03 PM, Joseph Lucia <jlucia at cysd.k12.pa.us>
>wrote:
>> 11:51:49.510 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:102]
>>-
>> Looking up DN using userFilter
>> 11:51:49.511 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:193]
>>-
>> Search with the following parameters:
>> 11:51:49.513 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:194]
>>-
>>  dn = OU=Users,DC=example,DC=com
>> 11:51:49.516 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:195]
>>-
>>  filter = sAMAccountName={0}
>> 11:51:49.516 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:196]
>>-
>>  filterArgs = [username]
>> 11:51:49.517 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:197]
>>-
>>  searchControls = javax.naming.directory.SearchControls at 545576ef
>> 11:51:49.519 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:198]
>>-
>>  handler =
>
>At first glance it looks like a delay with DN resolution.
>If you hit your AD server directly with a client like ldapsearch do
>you see any slowness?
>
>--Daniel Fisher
>--
>To unsubscribe from this list send an email to
>users-unsubscribe at shibboleth.net

--
CONFIDENTIALITY NOTICE – This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message.