Documentation for Crowd 1.6. Documentation for other versions of Crowd is available too.
When configuring an LDAP directory connector in Crowd, you can set relaxed DN standardisation on or off. This page gives some background to the setting of this option.
Crowd needs to compare DNs (distinguished names) to check a number of things, such as whether a user is a member of a group. Some directories guarantee that DNs will always be in a standard format, and some return slight variants with changes such as extra whitespace. If your directory will always return a consistent string representation of a DN, you can enable relaxed DN standardisation. Using relaxed DN standardisation provides significant performance benefits, so we recommend enabling it where possible.
You can enable relaxed DN standardisation on the Crowd Directory Connector screen. See Configuring an LDAP Directory Connector.
If relaxed DN standardisation is turned on, Crowd will do a direct, case-insensitive, string comparison to determine whether two DNs are equal. If relaxed DN standardisation is off, Crowd will parse the DN and check the parsed version.
Active Directory guarantees the format of DNs, and so with AD we recommend turning on relaxed DN standardisation for a significant performance boost.
RELATED TOPICS
Overview
Content Tools
Apps
Except where otherwise noted, content in this space is licensed under a Creative Commons Attribution 2.5 Australia License.