How can we reduce the number of searches sent by UME to an LDAP server?

[snowdrop]

Our company has a new LDAP server and we are configuring the connection between the LDAP and our Enterprise Portal (7.5). When the portal authenticates the users, it sends several search requests to the LDAP server that are unnecessary from the point of view of the LDAP colleagues. They expect us to reduce the number of searches.

When we log in to the portal with user XY, the portal opens three connections:

In the 1st connection the UME sends the following search requests (SR):

SR1:

• [base: ou=Personal,ou=Account,o=COMPANY]
• [scope: base]
• [filter: (objectClass=*)]
• [attrs: objectclass ]

SR2:

• [base: ou=Personal,ou=Account,o=COMPANY]
• [scope: sub]
• [filter: (&(objectclass=t-person)(twiw-uid=XY))]
• [attrs: twiw-uid,displayname]

SR3:

• [base: ou=Personal,ou=Account,o=COMPANY]
• [scope: sub]
• [filter: (&(objectclass=t-person)(twiw-uid=XY))]
• [attrs: objectclass]

SR4:

• [base: tcid=239151438,ou=Personal,ou=Account,o=COMPANY]
• [scope: base]
• [filter: (objectClass=*)]
• [attrs: twiw-uid]

SR5:

• [base: tcid=239151438,ou=Personal,ou=Account,o=COMPANY]
• [scope: base]
• [filter: (objectClass=*)]
• [attrs: givenname,sn,mail,displayname,twiw-uid]

SR6:

• [base: tcid=239151438,ou=Personal,ou=Account,o=COMPANY]
• [scope: base]
• [filter: (objectClass=*)]
• [attrs: ismemberof]

In the 2^nd connection the portal sends a validation request:

• [dn: tcid=239151438,ou=personal,ou=account,o=COMPANY]

It is alright.

In the 3rd connection our portal sends the following search requests:

SR1:

• [base: ou=Groups,ou=BSO,ou=Application,o=COMPANY]
• [scope: base]
• [filter: (objectClass=*)]
• [attrs: objectclass]

SR2:

• [base: cn=gp.bso.cp_ts_bi_se-rep,ou=Groups,ou=BSO,ou=Application,o=COMPANY]
• [scope: base]
• [filter: (objectClass=*)]
• [attrs: objectclass,cn]

SR3:

• [base: cn=gp.bso.cp_ts_bi_onefc,ou=Groups,ou=BSO,ou=Application,o=COMPANY]
• [scope: base]
• [filter: (objectClass=*)]
• [attrs: objectclass,cn]

SR4:

• [base: cn=gp.bso.cp_ts_bs_ebanf_30,ou=Groups,ou=BSO,ou=Application,o=COMPANY]
• [scope: base]
• [filter: (objectClass=*)]
• [attrs: objectclass,cn]

SR5:

• [base: cn=gp.bso.cp_ts_bi_se-rep,ou=Groups,ou=BSO,ou=Application,o=COMPANY]
• [scope: base]
• [filter: (objectClass=*)]
• [attrs: cn]

SR6:

• [base: cn=gp.bso.cp_ts_bi_onefc,ou=Groups,ou=BSO,ou=Application,o=COMPANY]
• [scope: base]
• [filter: (objectClass=*)]
• [attrs: cn]

SR7:

• [base: cn=gp.bso.cp_ts_bs_ebanf_30,ou=Groups,ou=BSO,ou=Application,o=COMPANY]
• [scope: base]
• [filter: (objectClass=*)]
• [attrs: cn]

SR8:

• [base: ou=Groups,ou=BSO,ou=Application,o=COMPANY]
• [scope: sub]
• [filter: (&(objectclass=groupofuniquenames)(uniquemember=cn=gp.bso.cp_ts_bi_se-rep,ou=groups,ou=bso,ou=application,o=COMPANY))]
• [attrs: objectclass,cn]

SR9:

• [base: ou=Groups,ou=BSO,ou=Application,o=COMPANY]
• [scope: sub]
• [filter: (&(objectclass=groupofuniquenames)
• (uniquemember=cn=gp.bso.cp_ts_bi_onefc,ou=groups,ou=bso,ou=application,o=COMPANY))]
• [attrs: objectclass,cn]

SR10:

• [base: ou=Groups,ou=BSO,ou=Application,o=COMPANY]
• [scope: sub]
• [filter: (&(objectclass=groupofuniquenames)
• (uniquemember=cn=gp.bso.cp_ts_bs_ebanf_30,ou=groups,ou=bso,ou=application,o=COMPANY))]
• [attrs: objectclass,cn]

The above data of searches are copied from the log of LDAP (and anonymised). But they are also traceable in

• TSHW traces
• sapum.access.audit log file: sapumaccessaudit.txt

What we have tried:

We have implemented the solution of the SAP note 1570013, but the number of searches has not decreased.

How can we reduce the number of the above searches?

Here is the current Data Source Configuration file: datasourceconfiguration-iplanet-readonly-db-tse-13.xml

Thank you very much for any help in advance.

Best Regards,

Csaba

[cristiano_mazzotti]

Alerted moderator for incorrect tag

[former_member745933]

Alert the moderator for incorrect tag and provide the correct tag as well.

[snowdrop]

Hi Cristiano, hi Aravindkumar,

Thank you for alerting the moderator.

Can you help me find the correct tag?

Best regards,

Csaba