Technical Library | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
User Identification > eDirectory Agent > Configuring eDirectory Agent > Enabling full eDirectory Server queries
Enabling full eDirectory Server queries
Web Security Help | Web Security Solutions | Version 7.8.x
In small networks, you can configure Websense eDirectory Agent to query the eDirectory Server for all logged-on users at regular intervals. This allows the agent to detect both newly logged-on users and users who have logged off since the last query, and to update its local user map accordingly.
 
* 
Important 
Configuring eDirectory Agent to use full queries is not recommended for larger networks, because the length of time required to return query results depends on the number of logged on users. The more logged-on users there are, the higher the performance impact.
When you enable full queries for eDirectory Agent, the User entry timeout interval is not used, because users who have logged off are identified by the query. By default, the query is performed every 30 seconds.
Enabling this feature increases eDirectory Agent processing time in 2 ways:
*
Time needed to retrieve the names of logged-on users each time a query is performed
*
Time required to process user name information, remove obsolete entries from the local user map, and add new entries based on the most recent query
eDirectory Agent examines the entire local user map after each query, rather than identifying only new logons. The time required for this process depends on the number of users returned by each query. The query process can therefore affect both eDirectory Agent and Novell eDirectory Server response times.
To enable full queries:
1.
On the eDirectory Agent machine, navigate to the Websense bin directory (C:\Program Files or Program Files (x86)\Websense\Web Security\bin or /opt/Websense/bin/, by default).
2.
Locate the file wsedir.ini and make a backup copy in another directory.
3.
Open wsedir.ini in a text editor (like Notepad or vi).
4.
Go to the [eDirAgent] section of the file and find the following entry:
QueryMethod=<N>
Make a note of the QueryMethod value, in case you want to revert to the default setting later.
5.
Update the QueryMethod value as follows:
*
If the current value is 0 (communicate with the directory via LDAP), change the value to 2.
*
If the current value is 1 (communicate with the directory via NCP), change the value to 3.
 
* 
Note 
If changing this query value slows system performance, return the QueryMethod entry to its previous value.
6.
If the default query interval (30 seconds) is not appropriate for your environment, edit the PollInterval value appropriately.
Note that the interval time is set in milliseconds.
7.
Save and close the file.
8.
Restart the Websense eDirectory Agent service (see Stopping and starting Websense services).

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
User Identification > eDirectory Agent > Configuring eDirectory Agent > Enabling full eDirectory Server queries
Copyright 2016 Forcepoint LLC. All rights reserved.