ARTIFACTORY: Why does authentication to Artifactory via LDAP time out?

AuthorFullName__c
David Livshin
articleNumber
000005932
FirstPublishedDate
2023-12-20T15:07:13Z
lastModifiedDate
2025-07-20

ARTIFACTORY: Why does authentication to Artifactory via LDAP time out?

Artifactory uses a 10 or 15 second  (depending on version) connection timeout to LDAP by default. This default timeout should be sufficient in most cases, if you encounter timeouts we strongly suggest investigating the reason for the timeout as your first step. If the LDAP search does not return result in time, Artifactory will throw an error similar to below  

[ERROR] (o.a.a.l.p.LdapGroupProviderImpl:190) - An error occurred 
while retrieving LDAP groups with strategy STATIC,
​​​​​​org.springframework.ldap.UncategorizedLdapException: Uncategorized 
exception occured during LDAP processing; nested exception is javax.naming.NamingException: LDAPresponse read timed out, timeout 
used:10000ms.; remaining name 'ou=exchange_objects,dc=joshuanet,dc=global,dc=joshua,dc=com'
Troubleshooting steps:
  1. Please verify you have a strong, fast, network connection between the Artifactory server and the LDAP server. You may run a network trace between the servers to investigate this.
  2. Consider narrowing down your Artifactory LDAP search base by using "Search Base" in Artifactory's LDAP setting. This is the key issue in most cases, please do not ignore it! 
    • The Search Base in Artifactory is the context name in which to search relative to the base DN in the LDAP URL. If you have a very large LDAP server, setting an appropriate search base is necessary to avoid timeouts. 
    • Please see our Documentation for details, and consult your LDAP administrator for assistance.
  3. If the above options fail we can increase the LDAP timeout values. Please follow the instructions here . We should still work on discovering the root cause of the slowness that required us to increase the timeout.