Sun Java System Web Proxy Server 4.0.3 2006Q2 Administration Guide

Dynamic Group Impact on Server Performance

Using dynamic groups impacts server performance. If you are testing group membership, and the DN is not a member of a static group, Proxy Server checks all dynamic groups in the database’s base DN. Proxy Server determines if each memberURL matches by checking its base DN and scope against the DN of the user, and then performs a base search using the user DN as base DN and the filter of the memberURL. This procedure can involve a large number of individual searches.