https://community.splunk.com/t5/Security/How-to-troubleshoot-SSO-slowness/m-p/457756#M10675 <P>Hi a212830,</P> <P>I came along such problems when the user or group DN was set at a too high level in the LDAP tree. Work around was always setting the user and group DN's as specific as possible. You can add multiple in the list and seperate them by using a <CODE>;</CODE> between them. <BR /> Also, increase the logging channels of <CODE>AuthenticationManagerLDAP</CODE> and <CODE>ScopedLDAPConnection</CODE> in <CODE>Settings » Server settings » Server logging</CODE> to get more logs during run time.</P> <P>Another thing especially with AD: there was always a performance boost by using a specific DC server instead of the AD domain name. This has of course down sides as well.</P> <P>Hope this helps ...</P> <P>cheers, MuS</P> Thu, 26 Jul 2018 02:19:13 GMT MuS 2018-07-26T02:19:13Z https://community.splunk.com/t5/Security/How-to-troubleshoot-SSO-slowness/m-p/457755#M10674 <P>Hi,</P> <P>We've been experiencing some ongoing issues where the Splunk search-bar becomes unresponsive - you hit search, and it doesn't move, or even hangs entirely, requiring a reload of the entire page. We did some research, and the system health is good - neither our search-heads, nor our indexes are overloaded. Professional services was onsite, and gave it their blessing. Still, the problem remained, so we decided to create some local accounts, that bypass SSO, to see how they performed. Well, the difference was night and day. The entire "gui experience" was much faster and crisper. I'm at a loss on how to trouble-shoot this issue, however. Any suggestion? Appears to be an SSO issue - are there certain settings that could cause this issue? We use siteminder for our ldap integration. </P> Thu, 26 Jul 2018 01:48:41 GMT https://community.splunk.com/t5/Security/How-to-troubleshoot-SSO-slowness/m-p/457755#M10674 a212830 2018-07-26T01:48:41Z https://community.splunk.com/t5/Security/How-to-troubleshoot-SSO-slowness/m-p/457756#M10675 <P>Hi a212830,</P> <P>I came along such problems when the user or group DN was set at a too high level in the LDAP tree. Work around was always setting the user and group DN's as specific as possible. You can add multiple in the list and seperate them by using a <CODE>;</CODE> between them. <BR /> Also, increase the logging channels of <CODE>AuthenticationManagerLDAP</CODE> and <CODE>ScopedLDAPConnection</CODE> in <CODE>Settings » Server settings » Server logging</CODE> to get more logs during run time.</P> <P>Another thing especially with AD: there was always a performance boost by using a specific DC server instead of the AD domain name. This has of course down sides as well.</P> <P>Hope this helps ...</P> <P>cheers, MuS</P> Thu, 26 Jul 2018 02:19:13 GMT https://community.splunk.com/t5/Security/How-to-troubleshoot-SSO-slowness/m-p/457756#M10675 MuS 2018-07-26T02:19:13Z