Return
-
Title
High LDAP Traffic after installing the Secure Password Extension (SPE) -
Description
Why is there is a high amount of LDAP traffic to the domain controllers after installing the SPE via Group Policy Object (GPO)? -
Cause
This is a product design as the SPE makes contact with the Domain Controller (DC) to check for any changes which may have been written to the QPM storage container. The QPM storage container contains all of the settings configured within the QPM Admin site, therefore the SPE makes contact to capture any needed changes. -
Resolution
How often the SPE contacts the DC is controlled by the refresh interval. This refresh interval is defaulted to 5 minutes, however, it can be adjusted through the SPE ADM template provided with Password Manager. (see screen shot)
For additional information on the ADM template see table 18 of the Password Manager Admin guide.
https://support.oneidentity.com/technical-documents/password-manager/5.8/administration-guide/72
-
Attachments
