Alex, not sure which Tech Note you have. I created a few months ago a
video on your options with Nested AD groups. Recommended for performance is the
use of tokenGroups. I'm not aware of changes between 6.7 and 6.9 in handling of nested AD groups, but it may be worth getting your partner or Aruba support involved if you have seen performance issues in the past.
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check
https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------
Original Message:
Sent: Jul 23, 2021 10:15 AM
From: Alex Sharaz
Subject: Speeding up AD authentication when you have a deeply nested AD tree
A long long time ago, Aruba brought out a tech note on how to "tweak" an AD authentication source to speed up auths if you had a deeply nested tree. I implemented this on our UoY clusters and promptly forgot about it.
I'm now looking after some vanilla 6.7 clusters that are being dragged kicking and screaming up to 6.9.6 and just wondered, if, as part of the upgrade whether the tech note patch would be rolled out or if you still had to apply the tech note manually
A
------------------------------
Alex Sharaz
------------------------------