<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div class=""><br class="">
</div>
<div class="">HI All,</div>
<div class=""><br class="">
</div>
<div class="">I am experiencing a weird delay between 3 and 6 seconds when using DataConnector shown below. My DataConnector is pretty much the same as Shibboleth Wiki "Generate eduPersonAffiliation based on recursive group membership in Active Directory”
example on <a href="https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverScriptAttributeDefinitionExamples#ResolverScriptAttributeDefinitionExamples-GenerateeduPersonAffiliationbasedonrecursivegroupmembershipinActiveDirectory" class="">Generate eduPersonAffiliation
based on recursive group membership in Active Directory</a>. I am running IDP v2.4 (planning to upgrade soon) I’ve tried cranking up logging but am not seeing the issue. Has anyone else had an issue like this? </div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class="">
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span><resolver:DataConnector id="ADgroupLDAP" xsi:type="dc:LDAPDirectory"</div>
<div class=""> <span class="Apple-tab-span" style="white-space:pre"></span>ldapURL="<a href="ldaps://adserver_1:3269" class="">ldaps://adserver_1:3269</a>
<a href="ldaps://adserver_2:3269" class="">ldaps://adserver_2:3269</a> <a href="ldaps://adserver_3:3269" class="">
ldaps://adserver_3:3269</a> <a href="ldaps://adserver_4:3269" class="">ldaps://adserver_4:3269</a>
<a href="ldaps://adserver_5:3269" class="">ldaps://adserver_5:3269</a> <a href="ldaps://adserver_6:3269" class="">
ldaps://adserver_6:3269</a>"</div>
<div class=""> <span class="Apple-tab-span" style="white-space:pre"></span>baseDN=“AD_BASE_DN"</div>
<div class=""> <span class="Apple-tab-span" style="white-space:pre"></span>principal=“PRINCIPAL"</div>
<div class=""> <span class="Apple-tab-span" style="white-space:pre"></span>principalCredential=“PASSWORD"</div>
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span>maxResultSize="1000"</div>
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span>mergeResults="true"</div>
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span>searchTimeLimit="PT30.000S"</div>
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span>connectionStrategy="RANDOM"</div>
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span>></div>
<div class=""><br class="">
</div>
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span><resolver:Dependency ref="scripted_distinguishedName" /></div>
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span><dc:FilterTemplate></div>
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span><![CDATA[</div>
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span>(member:1.2.840.113556.1.4.1941:=${scripted_distinguishedName.get(0)})</div>
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span>]]></div>
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span></dc:FilterTemplate></div>
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span><dc:ReturnAttributes>distinguishedName</dc:ReturnAttributes></div>
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span></resolver:DataConnector></div>
</div>
<div class=""><br class="">
</div>
<div class="">
<div class=""><br class="">
</div>
<div class="">
<div class="">2016-12-27 00:00:02.383 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:210] - verifyDNS found hostname match: adserver_6</div>
<div class="">2016-12-27 00:00:02.436 - DEBUG [edu.vt.middleware.ldap.Ldap:193] - Search with the following parameters:</div>
<div class="">2016-12-27 00:00:02.437 - DEBUG [edu.vt.middleware.ldap.Ldap:194] - dn = AD_BASE_DN</div>
<div class="">2016-12-27 00:00:02.437 - DEBUG [edu.vt.middleware.ldap.Ldap:195] - filter = (member:1.2.840.113556.1.4.1941:=USER_DN)</div>
<div class="">2016-12-27 00:00:02.437 - DEBUG [edu.vt.middleware.ldap.Ldap:196] - filterArgs = []</div>
<div class="">2016-12-27 00:00:02.437 - DEBUG [edu.vt.middleware.ldap.Ldap:197] - searchControls = javax.naming.directory.SearchControls@12a0b94</div>
<div class=""><font color="#ff2600" class="">2016-12-27 00:00:02.438</font> - DEBUG [edu.vt.middleware.ldap.Ldap:198] - handler = [edu.vt.middleware.ldap.handler.FqdnSearchResultHandler@144f65b, edu.vt.middleware.ldap.handler.EntryDnSearchResultHandler@8a0a75,
edu.vt.middleware.ldap.handler.MergeSearchResultHandler@b4bbea, edu.vt.middleware.ldap.handler.BinarySearchResultHandler@19d3974]</div>
<div class=""><font color="#ff2600" class="">2016-12-27 00:00:06.922 </font>- DEBUG [edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.dataConnector.LdapDataConnector:414] - LDAP data connector ADgroupLDAP - Found the following attribute:
entryDN[CN=Desktop-</div>
</div>
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class="">
<div class="">2016-12-28 00:03:54.382 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:210] - verifyDNS found hostname match: adserver_5</div>
<div class="">2016-12-28 00:03:54.440 - DEBUG [edu.vt.middleware.ldap.Ldap:193] - Search with the following parameters:</div>
<div class="">2016-12-28 00:03:54.440 - DEBUG [edu.vt.middleware.ldap.Ldap:194] - dn = AD_BASE_DN</div>
<div class="">2016-12-28 00:03:54.440 - DEBUG [edu.vt.middleware.ldap.Ldap:195] - filter = (member:1.2.840.113556.1.4.1941:=USER_DN)</div>
<div class="">2016-12-28 00:03:54.441 - DEBUG [edu.vt.middleware.ldap.Ldap:196] - filterArgs = []</div>
<div class="">2016-12-28 00:03:54.441 - DEBUG [edu.vt.middleware.ldap.Ldap:197] - searchControls = javax.naming.directory.SearchControls@1a5793</div>
</div>
<div class="">
<div class=""><font color="#ff2600" class="">2016-12-28 00:03:54.441</font> - DEBUG [edu.vt.middleware.ldap.Ldap:198] - handler = [edu.vt.middleware.ldap.handler.FqdnSearchResultHandler@144f65b, edu.vt.middleware.ldap.handler.EntryDnSearchResultHandler@8a0a75,
edu.vt.middleware.ldap.handler.MergeSearchResultHandler@b4bbea, edu.vt.middleware.ldap.handler.BinarySearchResultHandler@19d3974]</div>
<div class=""><font color="#ff2600" class="">2016-12-28 00:03:59.432</font> - INFO [Shibboleth-Access:73] - 20161228T050359Z|174.1.116.121|<a href="http://idp.fdu.edu:443" class="">idp.fdu.edu:443</a>|/profile/SAML2/Redirect/SSO|</div>
<div class=""><br class="">
</div>
</div>
<div class=""><br class="">
</div>
<div class="">2016-12-28 00:06:44.514 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:210] - verifyDNS found hostname match: adserver_3</div>
<div class="">
<div class="">2016-12-28 00:06:44.576 - DEBUG [edu.vt.middleware.ldap.Ldap:193] - Search with the following parameters:</div>
<div class="">2016-12-28 00:06:44.576 - DEBUG [edu.vt.middleware.ldap.Ldap:194] - dn = AD_BASE_DN</div>
<div class="">2016-12-28 00:06:44.577 - DEBUG [edu.vt.middleware.ldap.Ldap:195] - filter = (member:1.2.840.113556.1.4.1941:=USER_DN)</div>
<div class="">2016-12-28 00:06:44.577 - DEBUG [edu.vt.middleware.ldap.Ldap:196] - filterArgs = []</div>
<div class="">2016-12-28 00:06:44.577 - DEBUG [edu.vt.middleware.ldap.Ldap:197] - searchControls = javax.naming.directory.SearchControls@f5e8c1</div>
<div class=""><font color="#ff2600" class="">2016-12-28 00:06:44.577</font> - DEBUG [edu.vt.middleware.ldap.Ldap:198] - handler = [edu.vt.middleware.ldap.handler.FqdnSearchResultHandler@144f65b, edu.vt.middleware.ldap.handler.EntryDnSearchResultHandler@8a0a75,
edu.vt.middleware.ldap.handler.MergeSearchResultHandler@b4bbea, edu.vt.middleware.ldap.handler.BinarySearchResultHandler@19d3974]</div>
<div class=""><font color="#ff2600" class="">2016-12-28 00:06:49.484</font> - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.dataConnector.LdapDataConnector:414] -</div>
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class="">Thank you in advance,</div>
<div class=""><br class="">
</div>
<div class="">-Chris</div>
<div class=""><br class="">
</div>
</body>
</html>