Symptoms

After setting an LDAP Directory Connector to use SSL (secure connection via the ldaps protocol) performance problems arise.

Cause

The default JNDI/LDAP service provider in Java does not pool SSL connections by default, meaning every LDAP request must open a new connection to the server (reference).

Resolution

To force the JVM to pool the SSL connections, either:

Add the following line to your FISHEYE_INST/system.properties file (create such a file if it doesn't exist):

com.sun.jndi.ldap.connect.pool.protocol=plain ssl
com.sun.jndi.ldap.connect.pool.authentication=none simple DIGEST-MD5

Or:

• -Dcom.sun.jndi.ldap.connect.pool.protocol="plain ssl"
• -Dcom.sun.jndi.ldap.connect.pool.authentication="none simple DIGEST-MD5"'

If you wish to customize the SSL connection pooling further, please see the full documentation provided by Sun.