Documentation | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Using eDirectory Agent for Transparent User Identification > Deploying and configuring eDirectory Agent > Enabling full queries
Enabling full queries
Using eDirectory Agent | Web Protection Solutions | v8.4.x, v8.5.x | 29-Apr-2022
In small networks, you can configure the eDirectory Agent to query the eDirectory Server for all logged-on users at regular intervals. This allows the agent to detect both newly logged-on users and users who have logged off since the last query, and to update its local user map accordingly.
 
* 
Important 
Configuring eDirectory Agent to use full queries is not recommended for larger networks, because the length of time required to return query results depends on the number of logged on users. The more logged-on users there are, the higher the performance impact.
When you enable full queries for eDirectory Agent, the User entry timeout interval is not used, because users who have logged off are identified by the query. By default, the query is performed every 30 seconds.
Enabling this feature increases eDirectory Agent processing time in 2 ways:
*
Time needed to retrieve the names of logged-on users each time a query is performed
*
Time required to process user name information, remove obsolete entries from the local user map, and add new entries based on the most recent query
eDirectory Agent examines the entire local user map after each query, rather than identifying only new logons. The time required for this process depends on the number of users returned by each query. The query process can therefore affect both eDirectory Agent and Novell eDirectory Server response times.
To enable full queries:
1.
On the eDirectory Agent machine, navigate to the bin directory (C:\Program Files\Websense\Web Security\bin or /opt/Websense/bin, by default).
2.
Locate the file wsedir.ini and make a backup copy in another directory.
3.
Open the original file in a text editor.
4.
Locate the following entry:
QueryMethod=<N>
5.
Update the QueryMethod value as follows:
*
If the current value is 0 (communicate with the directory via LDAP), change the value to 2.
*
If the current value is 1 (communicate with the directory via NCP), change the value to 3.
 
* 
Note 
If changing this query value slows system performance, return the QueryMethod entry to its previous value.
6.
If the default query interval (30 seconds) is not appropriate for your environment, edit the PollInterval value appropriately.
Note that the interval time is set in milliseconds.
7.
Save and close the file.
8.
Restart the eDirectory Agent service.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Using eDirectory Agent for Transparent User Identification > Deploying and configuring eDirectory Agent > Enabling full queries
Copyright 2022 Forcepoint. All rights reserved.