We're running ZCM 10.3.3 and eDir 8.8 SP5, both on SLES 10. Our LDAP servers are single-purpose servers. Below is an excerpt from a trace screen. Our LDAP servers that are designated authentication servers for the ZCM servers are getting pounded by requests like these, leading to very slow login times. The containers that are listed on the "base" lines in this trace correspond to the user containers in the User Sources area. There is something that is causing the ZCM servers to run a query like this very often. I'm not sure if it's when a user logins or what. There's just too much traffic to pin it down. It almost seems like some sort of refresh that's occurring. Have any of you see this kind of query for dynamic groups in your ZCM environment? Our windows 7 login policy is assigned to devices instead of users, so I don't think it's that. We have a few bundles that are assigned to users, but they are pretty specific items. I've spent a good deal of this week restarting ndsd processes on LDAP servers and users are getting pretty frustrated with very slow login times. Any help, troubleshooting tips, etc. would be appreciated.

Alan

1334581568 LDAP: [2011/11/04 0:36:00.611] (163.11.75.59:15587)(0x8085:0x63) Search request:
base: "ou=FACSTAFF_USERS,o=cedarnet"
scope:2 dereference:0 sizelimit:0 timelimit:21 attrsonly:0
filter: "(&(objectClass=dynamicGroup)(Member=cn=user1,ou=S TUDENT_USERS,o=CEDARNET))"
attribute: "dn"
1334581568 LDAP: [2011/11/04 0:36:00.611] (163.11.75.59:15587)(0x8085:0x63) Sending operation result 0:"":"" to connection 0xffffffffb45b4340
1334581568 LDAP: [2011/11/04 0:36:00.611] (163.11.75.59:15587)(0x8086:0x63) DoSearch on connection 0xffffffffb45b4340
1334581568 LDAP: [2011/11/04 0:36:00.611] (163.11.75.59:15587)(0x8086:0x63) Search request:
base: "ou=STUORG_USERS,o=cedarnet"
scope:2 dereference:0 sizelimit:0 timelimit:21 attrsonly:0
filter: "(&(objectClass=dynamicGroup)(Member=cn=user2,ou=S TUDENT_USERS,o=CEDARNET))"
attribute: "dn"
1334581568 LDAP: [2011/11/04 0:36:00.612] (163.11.75.59:15587)(0x8086:0x63) Sending operation result 0:"":"" to connection 0xffffffffb45b4340
1334581568 LDAP: [2011/11/04 0:36:00.612] (163.11.75.59:15587)(0x8087:0x63) DoSearch on connection 0xffffffffb45b4340
1334581568 LDAP: [2011/11/04 0:36:00.612] (163.11.75.59:15587)(0x8087:0x63) Search request:
base: "ou=STUDENT_USERS,o=cedarnet"
scope:2 dereference:0 sizelimit:0 timelimit:21 attrsonly:0
filter: "(&(objectClass=dynamicGroup)(Member=cn=user3,ou=S TUDENT_USERS,o=CEDARNET))"
attribute: "dn"
1334581568 LDAP: [2011/11/04 0:36:00.612] (163.11.75.59:15587)(0x8087:0x63) Sending operation result 0:"":"" to connection 0xffffffffb45b4340
1334581568 LDAP: [2011/11/04 0:36:00.612] (163.11.75.59:15587)(0x8088:0x63) DoSearch on connection 0xffffffffb45b4340
1334581568 LDAP: [2011/11/04 0:36:00.612] (163.11.75.59:15587)(0x8088:0x63) Search request:
base: "ou=PEOPLE_USERS,o=cedarnet"
scope:2 dereference:0 sizelimit:0 timelimit:21 attrsonly:0
filter: "(&(objectClass=dynamicGroup)(Member=cn=user4,ou=S TUDENT_USERS,o=CEDARNET))"
attribute: "dn"
1355635008 LDAP: [2011/11/04 0:36:01.324] (163.11.75.59:15587)(0x7f16:0x63) Sending operation result 0:"":"" to connection 0xffffffffb45b4340
1355635008 LDAP: [2011/11/04 0:36:01.324] (163.11.75.59:15587)(0x8089:0x63) DoSearch on connection 0xffffffffb45b4340
1355635008 LDAP: [2011/11/04 0:36:01.324] (163.11.75.59:15587)(0x8089:0x63) Search request:
base: "ou=TEMP_USERS,o=cedarnet"
scope:2 dereference:0 sizelimit:0 timelimit:21 attrsonly:0
filter: "(&(objectClass=dynamicGroup)(Member=cn=user5,ou=S TUDENT_USERS,o=CEDARNET))"
attribute: "dn"
1355635008 LDAP: [2011/11/04 0:36:01.325] (163.11.75.59:15587)(0x8089:0x63) Sending operation result 0:"":"" to connection 0xffffffffb45b4340
1355635008 LDAP: [2011/11/04 0:36:01.325] (163.11.75.59:15587)(0x808a:0x63) DoSearch on connection 0xffffffffb45b4340
1355635008 LDAP: [2011/11/04 0:36:01.325] (163.11.75.59:15587)(0x808a:0x63) Search request:
base: "ou=FACSTAFF_USERS,o=cedarnet"
scope:2 dereference:0 sizelimit:0 timelimit:21 attrsonly:0
filter: "(&(objectClass=dynamicGroup)(Member=cn=user3,ou=S TUDENT_USERS,o=CEDARNET))"
attribute: "dn"
1355635008 LDAP: [2011/11/04 0:36:01.326] (163.11.75.59:15587)(0x808a:0x63) Sending operation result 0:"":"" to connection 0xffffffffb45b4340
1355635008 LDAP: [2011/11/04 0:36:01.326] (163.11.75.59:15587)(0x808b:0x63) DoSearch on connection 0xffffffffb45b4340
1355635008 LDAP: [2011/11/04 0:36:01.326] (163.11.75.59:15587)(0x808b:0x63) Search request:
base: "ou=TEMP_USERS,o=cedarnet"
scope:2 dereference:0 sizelimit:0 timelimit:21 attrsonly:0
filter: "(&(objectClass=dynamicGroup)(Member=cn=user6,ou=S TUDENT_USERS,o=CEDARNET))"