For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Vsevolod_Petrov's avatar
Vsevolod_Petrov
Icon for Cirrostratus rankCirrostratus
Jul 09, 2014

AD Group Resource Assign

Hi,

I've found the AD Group Resource Assign action very useful.
It lets me create a link between AD Group and resource I want to place on the webtop.
E.g. if user is member of OWA Access Group then he will see an OWA link on the webtop.

Very good. I hope many people use it.


But I ran into a problem, when AD has thousands of groups it is not possible to use this feature in the VPE.

My browser freezes for 5-10 minutes trying to list all groups from AD.
In case if I need to make five or more assignments it can take more than one hour.
There is no such issue in the tmsh. So I guess it is only web gui problem.

If I could set a scope based on some OU= which will limit number of entries in the list of AD groups it would be good, but I don't see such option neither in gui, nor in documentation.

Is there such setting? And have you ever had issue like this?

2 Replies

  • Lucas_Thompson_'s avatar
    Lucas_Thompson_
    Historic F5 Account

    Interesting problem.

     

    Perhaps you can do some timing to see exactly how long AD takes to perform the lookup using ldp.exe or similar tool.

     

    Please open a support case so we can characterize exactly where the bottleneck is.

     

    Additionally. The same (and more) functionality is available in the advanced/full resource assignment agent, but it lacks the pick-list so you must know the group names beforehand.

     

  • Hi lthompson,

     

    I've checked Group listing in Chrome and it was much faster. So I assume that it is IE8 problem. Chrome draws the list in less than minute.

     

    Using Advanced assignment is powerful but makes you perform more steps.

     

    Thanks for your response!