Slow logon - CMC and LaunchPad 4.2.9

[111378]

Hello,

BI Platform 4.2.9 | Tomcat 9 | LDAP authentication

I'm seeing a lag when logging into BusinessObjects. The login page renders fine but after pressing the Logon button there is delay/lag of 10-30 seconds before loading.  Once in the system everything runs fine and is responsive. 

• I've gone through the tomcat config and don't see anything out of place. 
• I have another BI environment that uses the same LDAP config and it doesn't have any lag on logon.
• The problem env has two new CMS servers that will replace two older nodes.  The Web Tier is staying the same.

Any suggestions as to further troubleshooting this?  I'm not sure what else I can look at.

Thanks in advance,

Mike

[DellSC]

There are many things that can affect how long it takes to login to BOBJ.  The biggest one I've found when working with clients is the number of individual rights that have been assigned to the user.  When a user logs in, BOBJ gets all of the access rights that have been assigned to the user for everything in the system. 

Some things to think about when setting up security:

1.  Use access levels whenever possible - avoid setting separate "advanced rights".  

2.  Whittle custom access levels down to just the rights that are required. I usually set up separate object access, data access, and application access levels.  Object access is for folders and reports, data access is for universes and connections, and application access is for applications such as Webi.  The standard access levels have them all combined so BOBJ has to go through a bunch rights that aren't applicable when determining access to, for example, folders and reports.

3.  Bear in mind that you do NOT need to have both a regular right and the corresponding "that the user owns" right in the same access level.  For example, if you  have "View Objects" and "View Objects That the User Owns", you don't need the owner right because View Objects will allow the user to view everything.  The exception to this rule would be if the regular right applies only to "this object" and the owner right applies only to "subobjects".

When I've reconfigured security like this for a client that is having problems with long lag times on login, it makes a significant difference.

Also, make sure that the machines that run the CMS have plenty of RAM - more than the just minimum required.

-Dell

[111378]

Thanks for your detailed response. I will take a look at the system from that context.