My Oracle Support Banner

Performance Issues due to Multiple Ldap Calls to Check User Group Membership When Accessing Documents in WebCenter Portal (Doc ID 2095847.1)

Last updated on NOVEMBER 07, 2023

Applies to:

Oracle WebCenter Portal - Version 11.1.1.8.0 to 12.2.1.3.0
Information in this document applies to any platform.

Symptoms

ACTUAL BEHAVIOR

After login to WebCenter Portal and navigating to a page with Documents, it is observed that there are a series of ldapsearch calls to check the user group membership.
The following ldapsearch calls can be seen enabling heavy trace debug in OID:

BEGIN
ConnID:531 mesgID:11 OpID:10 OpName:search ConnIP:<IP-ADDR> ConnDN:cn=orcladmin
INFO :gslfseADoSearch BASE = cn=groups,cn=groups,dc=<DOMAIN>,dc=com FILTER = (|(uniquemember=cn=group1,cn=groups,dc=<DOMAIN>,dc=com)(uniquemember=cn=group2,cn=groups,dc=<DOMAIN>,dc=com)(uniquemember=cn=group3,cn=groups,cn=groups,dc=<DOMAIN>,dc=com)(uniquemember=cn=group4,cn=groups,cn=groups,dc=<DOMAIN>,dc=com)(uniquemember=cn=group5,cn=groups,cn=groups,dc=<DOMAIN>,dc=com)(uniquemember=cn=group6,cn=groups,cn=groups,dc=<DOMAIN>,dc=com)(uniquemember=cn=group7,cn=groups,cn=groups,dc=<DOMAIN>,dc=com)(uniquemember=cn=group8,cn=groups,cn=groups,dc=<DOMAIN>,dc=com)) #REQDATTR = 7 SCOPE = 2 REQDATTRS = uid mail cn description orclguid objectclass displayname
TIMELIMIT = 0 SIZELIMIT = 0 DEREF = 3
2015-12-04T21:22:59 * INFO:gsleswrASndResult OPtime=488506 micro sec RESULT=0 tag=101 nentries=0
END
...

BEGIN
ConnID:531 mesgID:12 OpID:11 OpName:search ConnIP:<IP-ADDR> ConnDN:cn=orcladmin
INFO :gslfseADoSearch BASE = cn=groups,cn=groups,dc=<DOMAIN>,dc=com FILTER = (|(uniquemember=cn=group9,cn=groups,dc=<DOMAIN>,dc=com)(uniquemember=cn=group10,cn=groups,dc=<DOMAIN>,dc=com)(uniquemember=cn=group11,cn=groups,dc=<DOMAIN>,dc=com)(uniquemember=cn=group12,cn=groups,dc=<DOMAIN>,dc=com)(uniquemember=cn=group13,cn=groups,dc=<DOMAIN>,dc=com)(uniquemember=cn=group14,cn=groups,dc=<DOMAIN>,dc=com)(uniquemember=cn=group15,cn=groups,dc=<DOMAIN>,dc=com)(uniquemember=cn=group16,cn=groups,dc=<DOMAIN>,dc=com)) #REQDATTR = 7 SCOPE = 2 REQDATTRS = uid mail cn description orclguid objectclass displayname
TIMELIMIT = 0 SIZELIMIT = 0 DEREF = 3
2015-12-04T21:22:59 * INFO:gsleswrASndResult OPtime=7112 micro sec RESULT=0 tag=101 nentries=0
END
...


The above calls are repeated until all groups the user belongs to are checked.

If you navigate away form the page with documents and get back a minute later you will see the same calls repeated again for the same user session.

This results in performance issues when accessing documents.


EXPECTED BEHAVIOR

Expected user group membership is not checked every time a user visits documents in the same session in WebCenter Portal.


STEPS

The issue can be reproduced at will with the following steps: 

  1. Enable heavy trace debug in OID.
    Refer to Doc ID 1239943.1 for information on how to enable OID Heavy Trace Debug.

  2. Login to WebCenter Portal.

  3. Navigate to a page with Documents in WebCenter Portal.
    Here you should see the ldap calls in OID to check the User Group Membership.

  4. Navigate away from the page with Documents and get back a minute later.
    Here you should see the same ldap calls in OID to check the User Group Membership. 

Changes

 

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.