Setting Limits for Fetching Information From External Domains

Server Configuration > Post Install Server Security > Choosing Your Security Policy > Setting Limits for Fetching Information From External Domains

To better manage performance when fetching large numbers of users or groups from an external domain, administrators can configure the following security properties:

Property	Description
mks.userFetchLimit	Sets the maximum number of users that can be queried on the domain at any one time. The default value is 100.
mks.groupFetchLimit	Sets the maximum number of groups that can be queried on the domain at any one time. The default value is 100.

The goal in configuring fetch limits is to set a value that maximizes performance while reducing the load on the LDAP and external database servers. Setting the value too low can result in too many fetch operations, causing slower performance. Setting the value too high can place a higher load on the LDAP server and/or external database server. The fetch limit security properties are configured in the security.properties file.

For the fetch limit changes to take effect, the Integrity Lifecycle Manager server must be restarted.