[
https://issues.apache.org/jira/browse/OAK-11026?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Joerg Hoh closed OAK-11026.
---------------------------
> ExternalGroupPrincipalProvider needs to cache results of local group
> resolution
> -------------------------------------------------------------------------------
>
> Key: OAK-11026
> URL: https://issues.apache.org/jira/browse/OAK-11026
> Project: Jackrabbit Oak
> Issue Type: Improvement
> Components: auth-external, core
> Reporter: Angela Schreiber
> Assignee: Alejandro Moratinos
> Priority: Critical
> Fix For: 1.72.0
>
>
> The dynamic sync feature stores the list of external group principal names
> with the user account. However, if those external groups are members of local
> groups owned by the repository, that inherited group membership is not cached
> and will be re-calculated upon subsequent repository logins.
> In case of a high number of inherited local groups this can lead to
> performance issues upon login and we should leverage the UserConfiguration
> configuration parameter PARAM_CACHE_EXPIRATION to also populate the
> information below userhome/rep:cache with the result from the group principal
> resolution from {{ExternalGroupPrincipalProvider}}.
> this should go along with dedicated benchmarks measuring the effect.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
