Grouper Users - Open Discussion List

[Tom Zeller <>]

> Querying ldap, for subjects (in grouper) and for member identifiers
> (in ldappcng), probably takes the most time.

Looks like I may be wrong.

I assumed that ldap lookups were the bottleneck, and they may be
depending on the environment, but I found that unnecessary retrievals
of attributes for members, when omitted, resulted in a significant
performance improvement (~80% for a group with 10k members).

The MemberDataConnector returns all attributes for a member (including
memberOf), but if those attributes are not part of provisioning, then
those queries can be skipped. I also found that ignoring the Velocity
template engine used to create ldap search filters resulted in a small
gain.

So, additional configuration options for the MemberDataConnector will
help, which I should create a bug for. Once this is done, then
implementing caching in the SPMLDataConnector and tuning caching in
the CachingSubjectResolver should also help.

TomZ