cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

Logon to Portal using LDAP SSO Performance

Former Member

on ‎02-16-2009 11:52 PM

0 Kudos

Hello Everyone,

I am facing a performance problem related to SSO to Portal via LDAP. I have implemented SSO to Portal using LDAP via the SPNEGO Login Module.

Randomly for some users when they access the Portal it takes them 12-20 seconds. For other users it happens instantly 1-3 seconds. Its really hard to narrow down the problem. Even when the landing page is very light (generic Home tab).

If anyone has experience with this or can point me to the right direction to troubleshoot, I will really appreciate it.

Enviornment: EP 7.0 sps16 / HP-UX 11i / Oracle 10g / Windows AD 2003

Thank you!

Show replies
Show replies
Answer

Accepted Solutions (0)

Answers (1)

Answers (1)

Former Member
‎02-23-2009 7:19 PM
0 Kudos

Anyone? Any thoughts?

Show replies
Show replies
Former Member
‎02-23-2009 7:29 PM
0 Kudos

The Kerberos logon process is quite intensive in terms of accessing the AD etc. Does the location of the users come into it? Is the AD getting very busy?

Former Member
‎03-19-2009 2:41 PM
0 Kudos

Hello,

Are you suggesting that it could be a performance probelm with the AD? Is there anything on the SAP side that can be done to tune the UME settings when using LDAP?

Thanks,

Imran

hofmann
Active Contributor
‎03-19-2009 6:21 PM
0 Kudos

Hi,

Kerberos SSO means, that the browser + server are accessing the AD to find out, if the user is authenticated. The performance of this process depends on your AD topology and network.

Are all users using the same AD server? Are there remote-side locations? Where are the GC servers installed? Are the users on the same OU? Complex OU / Scheme? VPN / Proxy between the users and the AD?

Is the IE + Windows on the same patch level (IE 6 / 7 or XP SP2/3, Vista, etc)? Network latency problems?

br,

Tobias

Former Member
‎03-20-2009 4:02 PM
0 Kudos

Hello Everyone,

Thanks for responding. So it looks like its very important for AD to perform well. How can I identitfy that the problem is coming from AD and not from SAP.

I want to make sure that problem is not in SAP. Are there, logs, traces, or tools that any of your recommend to identify whether its truly an AD performance problem vs SAP Portal?

Thanks again,

Imran

hofmann
Active Contributor
‎03-20-2009 4:14 PM
0 Kudos

Hi,

you can do a load test of your AD

MS ADTest: http://www.microsoft.com/downloads/details.aspx?familyid=4814fe3f-92ce-4871-b8a4-99f98b3f4338&displa...

Novell LDAP Benchmark: http://www.novell.com/coolsolutions/tools/14046.html

Also take a look at the your AD server's CPU, disk and network utilization.

br,

Tobias

Ask a Question