Comments on: 10.5 AD plugin slow logins related to macAddress query http://patternbuffer.wordpress.com/2008/04/15/105-ad-plugin-slow-logins-related-to-macaddress-query/ Kyle Crawford Fri, 06 Nov 2009 02:53:19 +0000 http://wordpress.com/ hourly 1 By: Rob Ingenthron http://patternbuffer.wordpress.com/2008/04/15/105-ad-plugin-slow-logins-related-to-macaddress-query/#comment-258 Rob Ingenthron Fri, 25 Sep 2009 22:22:50 +0000 http://patternbuffer.wordpress.com/?p=37#comment-258 Another work-around, given that the "macAddress" attribute is not actually being used: use ADSIEDIT to change the "lDapDisplayName" for the "macAddress" attribute to something like "macAddress-CHANGED" or "macAddress-workaround" or whatever. If an ldap query references a non-existent attribute, it will just ignore it immediately, so no delay for lookups. We have the Mac issue, as well as the exact same issue with another application, and since neither is actually using the attribute in question (and no other app is referencing the attributes, either), renaming solves our issues. The one caveat being that you have to remember/document that this change was made, or you will have to track it down at a later date (if ever) if the macAddress attribute is ever actually needed at some point. USE WITH CAUTION! Use ADSIEDIT.MSC to edit "macAddress" in the "Schema" container, changing the "lDapDisplayName" in the properties for "macAddress" to something different. You have to be in Schema Admins, and you have to do this on the domain controller with the Schema Master role, and changes have to be enabled. Here's a nice, succinct reference to changing the AD schema: http://www.setup32.com/network-administration/active-directory/modifying-active-directorys-schema.php -- Rob "I" -- Another work-around, given that the “macAddress” attribute is not actually being used: use ADSIEDIT to change the “lDapDisplayName” for the “macAddress” attribute to something like “macAddress-CHANGED” or “macAddress-workaround” or whatever.

If an ldap query references a non-existent attribute, it will just ignore it immediately, so no delay for lookups. We have the Mac issue, as well as the exact same issue with another application, and since neither is actually using the attribute in question (and no other app is referencing the attributes, either), renaming solves our issues.

The one caveat being that you have to remember/document that this change was made, or you will have to track it down at a later date (if ever) if the macAddress attribute is ever actually needed at some point.

USE WITH CAUTION!
Use ADSIEDIT.MSC to edit “macAddress” in the “Schema” container, changing the “lDapDisplayName” in the properties for “macAddress” to something different.
You have to be in Schema Admins, and you have to do this on the domain controller with the Schema Master role, and changes have to be enabled.

Here’s a nice, succinct reference to changing the AD schema:
http://www.setup32.com/network-administration/active-directory/modifying-active-directorys-schema.php

– Rob “I” –

]]> By: ellgreco http://patternbuffer.wordpress.com/2008/04/15/105-ad-plugin-slow-logins-related-to-macaddress-query/#comment-134 ellgreco Thu, 30 Oct 2008 11:07:50 +0000 http://patternbuffer.wordpress.com/?p=37#comment-134 is there an index for the macAddress attribute in AD. You should get alot more quicker queries if you index that attribute is there an index for the macAddress attribute in AD. You should get alot more quicker queries if you index that attribute

]]> By: Fix for slow AD logins/joins caused by macAddress query « Pattern Buffer: http://patternbuffer.wordpress.com/2008/04/15/105-ad-plugin-slow-logins-related-to-macaddress-query/#comment-97 Fix for slow AD logins/joins caused by macAddress query « Pattern Buffer: Fri, 13 Jun 2008 19:34:04 +0000 http://patternbuffer.wordpress.com/?p=37#comment-97 [...] June 13, 2008 — Kyle Crawford I’ve been hassling Apple about this issue for quite a [...] [...] June 13, 2008 — Kyle Crawford I’ve been hassling Apple about this issue for quite a [...]

]]> By: Notes on Leopard AD Plugin 10.5.3 « Pattern Buffer: http://patternbuffer.wordpress.com/2008/04/15/105-ad-plugin-slow-logins-related-to-macaddress-query/#comment-82 Notes on Leopard AD Plugin 10.5.3 « Pattern Buffer: Thu, 29 May 2008 03:13:27 +0000 http://patternbuffer.wordpress.com/?p=37#comment-82 [...] isn’t fixed is the slow logins on AD environments with an R2 schema that hasn’t been extended with Mac [...] [...] isn’t fixed is the slow logins on AD environments with an R2 schema that hasn’t been extended with Mac [...]

]]> By: Kyle Crawford http://patternbuffer.wordpress.com/2008/04/15/105-ad-plugin-slow-logins-related-to-macaddress-query/#comment-55 Kyle Crawford Thu, 24 Apr 2008 01:21:10 +0000 http://patternbuffer.wordpress.com/?p=37#comment-55 You can't see others' bugs (unless you are Apple), but you can list others' bugs in your own bug report to help let Apple know that you are having the same problem. You can’t see others’ bugs (unless you are Apple), but you can list others’ bugs in your own bug report to help let Apple know that you are having the same problem.

]]> By: Rickey http://patternbuffer.wordpress.com/2008/04/15/105-ad-plugin-slow-logins-related-to-macaddress-query/#comment-54 Rickey Wed, 23 Apr 2008 19:36:07 +0000 http://patternbuffer.wordpress.com/?p=37#comment-54 I am having the exact same issue, however I can not find the bugs referenced in your post. It's pretty annoying too, when in 10.4.x it worked perfectly. I am having the exact same issue, however I can not find the bugs referenced in your post. It’s pretty annoying too, when in 10.4.x it worked perfectly.

]]>