1663287 - LDAP autentication into 3-tier Desktop Intelligence is very slow

• LDAP autentication into 3-tier Desktop Intelligence is taking a very long time
• It is slow due to a query sent to the CMS that requires all users to be pulled back that belong to the same LDAP group

• SAP BusinessObject Enterprise XI 3
• Business Intelligence Platform
• Desktop Intelligence
• LDAP Authentication

1. Client chooses LDAP in the dropdown on the Deski client
2. The application server recognizes this and sends GIOP traffic to the CMS requesting LDAP bind information
3. CMS looks to its DB, gets the LDAP plugin information and send the GIOP reply to the App server
4. App server creates a bind to the LDAP server and tests the username and password entered (Authentication step)
5. LDAP replies that the username and password are valid
6. App server tells the CMS that the username and password are valid
7. CMS creates a bind to the LDAP server and validates the user is a member of a group and determines if the user belongs to a group that has access to Deski (Authorization step)
8. CMS replies back to the App server that the user is good-to-go
9. App server send the HTTP 200 back to the client and the Deski client begins to open
10. Enterprise logins to 3-tier deski do not see this issue nor with InfoView LDAP logins.

Additional information:

• The application server logs will show the following statement that shows it is querying all of the users:
  • select * from CI_SYSTEMOBJECTS where Ancestors("SI_NAME='Usergroup-User'","SI_ID=<<SI_ID OF AN LDAP USER>>") AND SI_KIND='Usergroup'

• The issue has been identified and logged under Problem Report ID ADAPT01545486

• This issue has been addressed by BusinessObjects Enterprise XI 3.1 FixPack 3.7, FixPack 4.1 and Service Pack 5

deski, desktopintelligence, desktop, intelligence, 3-tier, 3tier, 3 tier, zabo, ldap, auth, authentication, slow, performance, long, time, too, much, very, query, cms, connectionserver, ADAPT01545486, ADAPT1545486, ADAPT, 01545486, 1545486 , KBA , BI-BIP-AUT , Authentication, ActiveDirectory, LDAP, SSO, Vintela , BI-RA-DKI , Obsolete - Desktop Intelligence , Bug Filed