Security Software

LDAP query takes more than 10 seconds to execute.

For validating the policy configured, the Acess Manager(Sun Java System Access Manager) contacts the LDAP (Sun Java System Directory Server 6.2) to get the users in a dynamic group. The time out value configured in Access Manager for LDAP searches is 10 seconds.

Issue : The ldap query takes more than 10 seconds to execute at some times .

The query is executing with less than 10 seconds in most of the cases, but it takes more than 10 seconds in some cases. The total number of users available in the ldap is less than 1500.


7 etime =1
6 etime =1
102 etime=4
51 etime=5
26 etime=6
5 etime=7
4 etime=8


From the ldap access logs we can see the following entry,some times the query takes more than 10 seconds,


[28/May/2012:14:21:26 +0200] conn=281 op=41433 msgId=853995 - SRCH base="dc=****,dc=****,dc=com" scope=2 filter="(&(&(***=true)(**=true))(objectClass=vfperson))" attrs=ALL

[28/May/2012:14:21:36 +0200] conn=281 op=41434 msgId=854001 - ABANDON targetop=41433 msgid=853995 nentries=884 etime=10

The query was aborted by the access manger after 10 seconds.

Please post your suggestions to resolve this issue .

1.How we can find out , why the query is taking more than 10 seconds ?
2.Next steps to resolve this issue .