API Gateway: Ldap search via policy manager timeout

Products

• CA API Gateway

Issue/Introduction

The CA API Gateway is facing slow LDAP authentication even when the ldap read timeouts are set to a high value. The Ldap search without the gateway works fast.  The issue is also seen when logging into policy manager using ldap credentials.

The ldap search for users, groups or any particular user/group showed "Awaiting response from Gateway"
and logging into policy manager showed "Connection to Gateway has been broken"
 

Environment

All supported versions of the CA API Gateway.

Cause

The issue has been identified to be that ldap referrals were turned on within the ldap configuration.
 

Resolution

The ldap referrals can be turned off by setting the following cluster wide property
ldap.referral=ignore

You can find more about all ldap related cluster wide properties here
https://techdocs.broadcom.com/us/en/ca-enterprise-software/layer7-api-management/api-gateway/11-0/reference/gateway-cluster-properties/ldap-cluster-properties.html 

Additional Information

Additionally also change the nesting level to 1 within the ldap configuration if the above solution doesn't work or open a case with Broadcom Support.