Since the cause and troubleshooting procedure for the time-consuming search for an AD group are similar to those for the time-consuming search for an LDAP group, the following takes LDAP as an example.
Cause one: The set range in the searching rule is too broad. As a result, a large number of repeated group names are returned by the LDAP server. The filtering implemented on the SVN3000 takes a long time.
Cause two: The main and backup LDAP servers are configured. The main LDAP server may fail to be connected, and thus query requests are sent to the backup LDAP server.