Skip to main content

This article explains that external security that has "Use all groups" checked could fail.

Problem:

We are running Enterprise Server using external security and the console.log contains the following message.

ESFEM1025W MLDAP: Warning: configured maximum number of groups exceeded

Resolution:

External security that has "Use all groups" checked could fail because a user is permitted within the security rules if they belong to more then 64 groups. Add the following with the correct number of groups a user can belong if it is over 64 the default. From Enterprise Server Administration web page select the Security link from the left side of the page. Select the correct external security manager than select the Edit button below the list on security managers. At the bottom of the "Configuration Information" section add the following if you a user can belong to 100 groups. 
[Operation] section
maxgroups=100

Within version 6.0 WrapPack 1 the maxgroups can exceed 999. Rules for setting the correct maxgroup number are below:

Set the maximum number of user groups supported in Use-all-groups mode.

This must be at least as large as the number of groups that include any user who will sign on to the region.

The default is 64.

Increasing this value will consume more shared memory and increase processing time for authorization requests, so we recommend keeping it close to the actual number of user groups you have defined.

It has no effect when the "Use all groups" option is not enabled.

Incident Number: 2349396

Old KB# 14714

#EnterpriseDeveloper
#MFDS
Terms & ConditionsAccessibility statement