Details
-
Improvement
-
Status: Open
-
Critical
-
Resolution: Unresolved
-
None
-
None
-
None
-
None
Description
Leverage Directory Computed Attribute for User Group Discovery
We should use computed attribute memberof supported by Active Driectory to discover groups of the authenticated user. This would significantly boost performance as compared we computing groups using group search.
OpenLDAP also could be configured to return computed groups.
However, OpenLDAP would return this attribute as memberof.