As an update, I discovered that the latency was likely caused by the LDAP search base being defined too broadly in the authentication handler and attribute repository. I haven't verified for sure, but it seems that there were multiple referrals and subsequent LDAPS connections being made during every authentication, the sum of which accounted for the delay. Refining the search base seems to have resolved the issue entirely. d'oh.
Benjamin Mosior -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
