Configuring Satellite Server authentication may slow down logons and ZCC browsing

  • 7007335
  • 08-Dec-2010
  • 27-Apr-2012

Environment

Novell ZENworks 10 Configuration Management with Support Pack 3 - 10.3

Situation

When LDAP servers are configured to perform authentication and point to local LDAP replicas which are across slow WAN links from the Primary Servers and the database, logon times may significantly increase and ZCC browsing could slow down significantly.

Additional Information

Novell Engineering is not able to replicate this issue on ZCM 10.3.3 or 11.0 or greater.
No specific Fixes have been made to resolve this issue, if you on the versions above or later and experiencing the problem below Novell Technical Support should be contacted.
 
--------------------------------
 
ZCC allows for configuring specific replica servers for Authentication purposes which works properly.
However, this does not control which servers are used for Configuration purposes.
This can cause the Primaries to talk to remote LDAP servers across slow WAN links, which can degrade performance by more than what is gained by the local authentication given by the Satellite servers.
 
To determine if the issue exists, run the NETSTAT command on the Primary server to see if it has open connections on the LDAP ports to remote replicas.
If there are open connections, as a workaround, disable Satellite Server Authentication and remove any LDAP servers from ZCC that are across a WAN from the Primary servers.