Liferay 6.1 LDAP导入降级系统性能 [英] Liferay 6.1 LDAP import degrading system performance

问题描述

我的门户网站能够通过LDAP服务器(Active Directory)成功进行身份验证，但是由于Liferay Scheduler在一段时间后导入用户，导致系统性能下降.我可以看到JAVA和MySql进程的内存和CPU使用率很高.

My portal is able to successfully authenticate with LDAP server (Active Directory) but due to liferay scheduler importing users after some interval, my system performance is degrading. I can see high memory and CPU usage for JAVA and MySql process.

由于未正确配置Active Directory，我可以看到由于日志文件中的某些问题而导致与未导入用户有关的许多异常.对于每个日志文件，我在LDAP查询中添加了一些过滤器来过滤相关的实体(用户).

As Active directory is not configured properly, I can see many exceptions related to users not imported due to some issue in log files. As per log file I have added few filters in LDAP query to filter relevant entities (users).

我正在控制面板中使用以下过滤器进行导入搜索过滤器:

I am using following filter in control panel for Import Search Filter:

(&(objectClass=user)(mail=*@myorg.com)(extensionAttribute1=*))

"extensionAttribute1"用于员工ID. (邮件和员工ID条目用于过滤所需的数据.)

"extensionAttribute1" is used for employee ID. (Mail and employee id entry is used to filter required data.)

要在活动目录中正确组织数据，将需要一些时间，但是我想立即解决此问题，例如仅在用户尝试登录时导入等.

To organize data in active directory properly it will take some time but I want some immediate workaround for this issue, like import only on login attempt by user etc.

推荐答案

如果仅由于用户登录而只想导入用户数据，则必须禁用启用Ldap导入"，而使LDAP保持启用状态.

If you want to import user data only due to his login you have to disable "Ldap import enabled" leaving the LDAP enabled.

您可以使用控制面板或portal-ext.properties

You can do this using control panel or by portal-ext.properties

为了避免降低系统性能，您可以设置较小的导入页面大小(默认为si 1000，可以设置20)并缩小导入时间间隔.

And also to avoid low system performance you can setup a small import page size (default si 1000, you can set 20) and narrow import time interval.

请参阅portal.properties中的ldap.import.interval和ldap.page.size

see ldap.import.interval and ldap.page.size in portal.properties

这篇关于Liferay 6.1 LDAP导入降级系统性能的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！