AD nested groups

[Hong Ye]

Thanks Timo! It was about 40 seconds/per search. After narrow the search base, now it is about 1 -2 seconds /per search.

Hong 

On 8/8/17, 6:01 AM, "users on behalf of Tunturi Timo" <users-bounces at shibboleth.net on behalf of timo.tunturi at aalto.fi> wrote:

    On 25/07/17 18:00, Hong Ye wrote:
    > Does anyone know how to get all the AD group membership including nested 
    > groups for a user in AttributeResolver? I tried the solution below, but 
    > it’s very slow. Is there any other solution?
    
    Other than using a search base as narrow as possible and adding some 
    indexed attributes like "(objectCategory=group)(objectClass=group)" to 
    your search filter there probably isn't a lot you can do to speed things up.
    
    How slow is very slow?
    
    -- Timo Tunturi
    -- 
    To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net