Service Desk Practitioners Forum
cancel
Showing results for 
Search instead for 
Did you mean: 

LDAP & SC 6.2 Performance Issue

Highlighted
Terry L Davis
Acclaimed Contributor

LDAP & SC 6.2 Performance Issue

We are implementing Service Center 6.2 and are using LDAP integration to AD 2003. Intermittently (about 90% of the time) authentication to the application is taking between 40 - 120 seconds. On a very few occassions, everything works as expected and authentication takes less than a second.

We have isolated the query that SC is using for the authentication call to AD and are repeatedly running it against our AD. The query gets a response back from the AD in no more than 2 seconds, in most cases it is less than 1 second.

Here is the LDAP section of our sc.ini file:

# LDAP parameters
ldapbinddn:CN=saservicedeskdev,OU=Service Accounts,OU=CRP,OU=AMR,DC=XXXXX,DC=local
ldapbindpass:XXXXXXXXX
ldapnostrictlogin:1
ldapauthenticateonly:1

Once Authenticated, everything in the app runs as expected.

This issue started when we turned on the LDAP integration. Prior to that, all authentications were below 1 second.

Any thoughts on what could be causing the delay in LDAP authentications?

Thanks,
Terry
4 REPLIES
JaS_4
Honored Contributor

Re: LDAP & SC 6.2 Performance Issue

Try ldapdisconnect:1. It will ensure that the ldap connection is closed after each transaction instead of each client. So that the ldap connections does not linger.
Terry L Davis
Acclaimed Contributor

Re: LDAP & SC 6.2 Performance Issue

Thanks for the tip JaS! We included the parameter you offered but the issue is still there. We have this occurring in three seperate instances: two VM Ware partitioned servers and one standalone DL380 server.

We thought the issue could be related to the VM Ware partitions we are using for our TEST and DEV environments. So we brought up our soon-to-be production environment on a dedicated DL380 and the issue is there also.

Its curious that the LDAP queries run on these servers outside of Service Center and they get rapid responses repetedly. However, when Service Center is configured for LDAP connectivity, authentications take a long time.

Any other thoughts from others that have successfully implemented LDAP integration?

Thanks,
Terry
JaS_4
Honored Contributor

Re: LDAP & SC 6.2 Performance Issue

No more ideas at this stage. You could check if it's a network issue or run scenter -helpldap and see if there are a debugging parameter that will help pinpoint the problem.
AlperO
Regular Collector

Re: LDAP & SC 6.2 Performance Issue

We had the same problem on a customer site. When ldap auth. was enabled, submitting an incident was taking almost 30 seconds, but after disabling LDAP, it took 3-4 secs. Customer said, their LDAP servers might have been so busy because there were other apps. using LDAP.
//Add this to "OnDomLoad" event