Null/empty group name in the TIBCO Spotfire Server LDAP configuration "group-synchronization" settings syncs all groups from the external directory
Article ID: KB0076628
Updated On:
| Products | Versions |
|---|---|
| Spotfire Server | 7.14 and lower |
Description
When entering an external directory group in the TIBCO Spotfire Server LDAP configuration "group-synchronization" settings (TIBCO Spotfire Server Configuration Tool > Configuration Tab > User Directory > Group Synchronization), a NULL group is sometimes entered after the last group. If this configuration is allowed to sync then the TIBCO Spotfire Server may inadvertently fetch all the groups from external directory causing Spotfire to become very slow.
In the configuration.xml, you can see the entry "<name />" at the end as shown in below example:
In the configuration.xml, you can see the entry "<name />" at the end as shown in below example:
<group-names> <name>CN=mygroup1,DC=na,DC=mycomp,DC=com</name> <name>CN=mygroup2,DC=na,DC=mycomp,DC=com</name> <name /> </group-names>
Issue/Introduction
Having an empty group by any chance in configuration.xml results in pulling up all the groups.
Resolution
This defect has been fixed in Spotfire version 10 and higher, which will deliver increased robustness for this type of issues going forward. Specifically:
For versions 7.14 and lower :
Ensure that the empty group name "<name />" is not present in the TIBCO Spotfire Server configuration. If it is present, delete it from the uiconfig tool or configuration.xml file, and re-save the configuration.
After the configuration has been corrected, there may be many disconnected groups in the database which had been inadvertently imported when the problem configuration was in place. In this case you will want to clean up these disconnected groups from the Spotfire database by running the 'delete-disconnected-groups' command to delete from the user directory disconnected groups.
Refer Article: How to remove disconnected synchronized groups from TIBCO Spotfire. Details of command 'delete-disconnected-groups' can be found here.
- Ensures the empty group name isn'tt added to the configuration neither by the Configuration Tool nor by the config-ldap-group-synch command.
- In case an empty group name is added as part of the configuration then empty group(s) are ignored when performing synchronization.
For versions 7.14 and lower :
Ensure that the empty group name "<name />" is not present in the TIBCO Spotfire Server configuration. If it is present, delete it from the uiconfig tool or configuration.xml file, and re-save the configuration.
After the configuration has been corrected, there may be many disconnected groups in the database which had been inadvertently imported when the problem configuration was in place. In this case you will want to clean up these disconnected groups from the Spotfire database by running the 'delete-disconnected-groups' command to delete from the user directory disconnected groups.
Refer Article: How to remove disconnected synchronized groups from TIBCO Spotfire. Details of command 'delete-disconnected-groups' can be found here.
Additional Information
Feedback
Yes
No
Powered by
