Uploaded image for project: 'OpenAM'
  1. OpenAM
  2. OPENAM-327

User attribute mapping to Session attribute functionality goes to LDAP for every attributes

    XMLWordPrintable

    Details

    • Bug
    • Status: Open
    • Major
    • Resolution: Unresolved
    • None
    • None
    • authentication
    • None
    • Rank:
      1|hzlus7:

      Description

      In All Core Settings if you're using the "User Attribute Mapping to Session Attribute" (sunAMUserAttributesSessionMapping property), then upon a successful login OpenAM will fetch those attributes one by one from the LDAP, so if you're mapping 8 attributes, then it's going to be 8 LDAP search request for the user. If you have multiple datastores configured, then this value multiplies, which could cause performance problems in some situations.
      I think in LoginState.java around line 1489 the AMIdentity#getAttributes(Set) method should be used instead of the current implementation.

        Attachments

          Issue Links

            Activity

              People

              JamieBowen Jamie Bowen
              peter.major Peter Major [X] (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Dates

                Created:
                Updated: