Security

 View Only
last person joined: 8 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Speeding up AD authentication when you have a deeply nested AD tree

This thread has been viewed 15 times

  • 1.  Speeding up AD authentication when you have a deeply nested AD tree

    MVP EXPERT
    Posted Jul 23, 2021 10:16 AM
    A long long time ago,  Aruba brought out a tech note on how to "tweak" an AD authentication source  to speed up  auths if you had a deeply nested tree. I implemented this on our UoY clusters and promptly forgot about it.

    I'm now looking after some vanilla 6.7 clusters that are being dragged kicking and screaming  up to 6.9.6 and just wondered, if, as part of the upgrade whether the tech note patch would be rolled out or if you still  had to apply the tech note manually

    A

    ------------------------------
    Alex Sharaz
    ------------------------------


  • 2.  RE: Speeding up AD authentication when you have a deeply nested AD tree

    EMPLOYEE
    Posted Jul 26, 2021 05:59 AM
    Alex, not sure which Tech Note you have. I created a few months ago a video on your options with Nested AD groups. Recommended for performance is the use of tokenGroups. I'm not aware of changes between 6.7 and 6.9 in handling of nested AD groups, but it may be worth getting your partner or Aruba support involved if you have seen performance issues in the past.

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------

    Original Message


  • 3.  RE: Speeding up AD authentication when you have a deeply nested AD tree

    MVP EXPERT
    Posted Jul 26, 2021 06:21 AM
    any thanks for this..

    Rgds
    Alex

    ------------------------------
    Alex Sharaz
    ------------------------------

    Original Message