Release Notes › Policy Server Release Notes › Defects Fixed in SiteMinder Releases › Defects Fixed for 6.0 SP3 › Policy Server Improved When Connecting to Large LDAP Policy Store (40062)

Policy Server Improved When Connecting to Large LDAP Policy Store (40062)

The Policy Server User Interface's performance has been improved if the Policy Server connects to LDAP-based policy store that contains extremely large amounts of data.

To improve of the performance of this type of configuration, set the following LDAP search timeout registry setting:

HKEY_LOCAL_MACHINE\SOFTWARE\Netegrity\SiteMinder\CurrentVersion\LdapPolicyStore\SearchTimeout

You should set the LDAP search timeout registry setting at a value that is large enough to keep the Policy Server from timing out when it is retrieving large amounts of policy store data from an LDAP server. The default value is 20 seconds.

Before setting this registry setting, you should consider the following factors:

• Network speed and bandwidth
• Size of LDAP search query response
• LDAP directory server connection state
• LDAP directory server load

Also, the following is a new Max AdmComm Buffer Size registry entry that allows you to tune the buffer size for the Policy Server User Interface:

HKEY_LOCAL_MACHINE\SOFTWARE\Netegrity\SiteMinder\CurrentVersion\PolicyServer\Max AdmComm Buffer Size

This value defines the maximum amount of byte data in a single packet passed from the Policy Server to the Policy Server User Interface.

You can set this value between 256 KB to 2 GB and, when no setting exists, the default is 256 KB.

Note: Increasing the buffer size could result in decreased Policy Server performance.