Logging into Content Server is Slow if the User is a Member of Multiple User Groups (Doc ID 1949288.1)

Last updated on MARCH 05, 2024

Applies to:

Symptoms

Weblogic Server is configured with Windows AD provider (or other LDAP providers), and group Base is set to root.

The groups are identified for WebCenter content by adding attribute (e.g: department=webcenter)

Then, apply the “All Groups Filter” in Weblogic Server, set the Group filter
e.g.:
(&(objectCategory=group)(description=webcenter))

The filters are applied and works fine, it can be verified in Weblogic -> Realms, "Users and Groups". You can only those groups with  department=webcenter.

However, the first time when user login, UCM pull all the groups belong to the user even these groups are not belong to "department=webcenter". If the user belong to a lot of groups (e.g 100 groups), it slows down the login process.

On Content Server, enable JPS tracing and you will see that all the groups being pulled in (outside the filter). There is a huge performance impact (about 10 secs initial login/load)

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.