IV30524: LOGON IS VERY SLOW FOR A NON-ADMIN USER WHEN ACCESSLISTREQUIRED IS SPECIFIED TO YES IN CON

APAR status

• Closed as program error.

Error description

• While logging on with a user which is not defined in
  'Administrator' but 'AccessListRequired' is set to YES in
  config.xml, the code forces to use net group command to
  determine if the user is in any group in the domain which takes
  a lot of time, even if 'AccessList' for client connections
  contains the user.
  

Local fix

• Add the user into 'Administrator' section of config.xml
  

Problem summary

• Logon can be very slow. While logging on with a user which is
  not defined in 'Administrator' but 'AccessListRequired' is set
  to YES in config.xml, the code forces to use net group command
  to determine if the user is in any group in the domain which
  takes a lot of time, even if 'AccessList' for client connections
  contains the user.
  

Problem conclusion

• Code change was made to fix this issue.
  

Temporary fix

• Add the slow user into Administrator section in config.xml
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  EDITOR MESSAGES

• Fixed component ID

  5724K3700

Applicable component levels

• R201 PSY

     UP