UNSOLVED

khkris

updated

9 years ago

K

khkris

2 Intern

178 Posts

0

953

December 28th, 2017 11:00

Disable Enumerated users to no

What is the impact of disabling enumerated users to no in LDAP advanced settings ?  We have this option enabled, which tries to search and list thousands of users from LDAP for each UID search.

  • crklosterman

    450 Posts

    404

    0

    Posted January 2nd, 2018 12:00

    The impact is that you become limited to a set number of secondary groups that are carried with the UID, I think by default the limit is 16.  You also may run into issues if you have multi-protocol access.  Anyway this setting is defaulted to no, so someone manually changed it to yes.  It can create quite a load on an LDAP infrastructure.

    ~Chris