Problem when LDAP-Querying the GC

hello,

in our environment have 3 domains in 1 active directory forests. each domain has 2 dcs. in 1 domain want configure webapplication (ldap) query global catalog informations domain.

for testing purposes tried query simple linux-ldapsearches, works fine of time. there problem. not work reliable, because ldapsearches take 1 minute. these long running queries seems the  reason makes webapplication time out.

my assumption is, these long running queries appear, when dcs domain replicate (i checked times repadmin /showrepl , looks there coherence.)

our windows guy cant me out, hope here have experience in field. ok use global catalog requirement? why happening? has ideas further troubleshooting? nice use gc, because if works not have use ldap-proxy this.

best regards

stefan

hello,

first - global catalog same throughout forest. means if want query gc, may query dcs in own domain or in own location. 

second - have worked ldap queries on multiple occasions , have never noticed correlation ad replication. answering ldap query , performing replication 2 separate activities should not affect each other. so, think reasons long response time either query has wide scope (or filter wildcard in beginning) or querying wrong dc. can try check if query same or different dc when have , bad response times , check if query same in these cases?

/regards

Windows Server  >  Directory Services