Problem: User search is really slow in the UMC

scheinig · December 2, 2025, 11:11am

Problem:

User search is really slow in the UMC, when using dedicated admin accounts.

Investigation:

You could try using curl on the console to see how quickly the request comes back.
Adjust username and password for the token. And use your IP Address.

curl -X POST "http://10.200.43.60/univention/auth" -H "Content-Type:application/json" -H "Accept: application/json" -c cookies.txt -d '{"options": {"username": "Administrator", "password": "univention"}}'

SESSION_ID=$(grep "UMCSessionId" cookies.txt | awk '{print $7}')

curl -X POST "http://10.200.43.60/univention/command/udm/query"   -H "Content-Type: application/json" -H "X-Xsrf-Protection: $SESSION_ID" -b cookies.txt  -d 
'{ "options": { "container":"all", "hidden":"false","objectType":"users/user","objectProperty":"username","objectPropertyValue":"susi*","fields":["name","path","displayName","mailPrimaryAddress","firstname","lastname"]},"flavor":"users/user"}'|jq

Adjust `objectPropertyValue` if necessary.

Solution:

In this case the users had personal admin accounts, with slapd-acls to some attributes adn groupmemberships and passwords.
A workaround was to adjust the acls and move them higher up in the acl list