IDP Login Delay Question

[Joseph Lucia]

Peter,

The reason I am thinking it isn't LDAP is that when I watch wireshark
there is no traffic talking to Active Directory until after the delay,
then I see the authentication of the user and the attributes being
gathered.

Thanks,

Joseph Lucia
Information Systems Specialist
Central York School District
717-846-6789 x1211
jlucia at cysd.k12.pa.us






On Mar 27, 2014 ~ Mar 27, 2014 ~ 5:02 AM 5:02 AM, "Peter Schober"
<peter.schober at univie.ac.at> wrote:

>* Joseph Lucia <jlucia at cysd.k12.pa.us> [2014-03-26 20:02]:
>> Thanks for your response, I did an ldap search and my results were
>> within a fraction of a second. The same behavior I see when the
>> process gets beyond whatever is holding it up.
>
>You did try from the IDP machine, using (as far as you can tell) the
>same settings, right?
>Make sure any options you use with ldapsearch match the settings (and
>defaults) from the Java libraries the IDP uses, e.g. dereferencing
>aliases, chasing referrals, etc.
>I don't have an example at hand (and don't know your ldap client
>implementation) but these often behave differently than the Java.
>-peter
>--
>To unsubscribe from this list send an email to
>users-unsubscribe at shibboleth.net

--
CONFIDENTIALITY NOTICE – This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message.