AnsweredAssumed Answered

ActiveDirectory authentication - some improvements ?

Question asked by Benoit_B on Sep 27, 2018
Latest reply on Oct 12, 2018 by Benoit_B

Hello,

 

We are configuring DevTest in order to use ActiveDirectory authentication.

After some tests we saw 2 things.

 

The first thing, there are 2 LDAP searchRequest sent when the user authenticates. The first request "searchRequest baseOjbect" with no result because the user entry is located in a subplace. And the second request "searchRequest wholeSubtree", with one result.

Why 2 requests ? One request "searchRequest wholeSubtree" can make the same thing (and avoid unuseful sollicitations).

 

The second thing, is how to reduce the number of attributes returned by the searchRequest ? Is there any way to configure it in DevTest ? There are about 39 items returned, but only 2 seems useful (CN and memberOf).

 

Best regards

Benoit

Outcomes