LDAP Searches slow or timeout when querying the entire directory
When Application is returned an LDAP Referral Response for DC=DomainDNSZones,DC=blah, DC=corp, queries take longer to complete, or in some cases timeout.
The application partition for DomainDNSZones exists in the tree of the searches baseDN:
-> the search is being performed from the DC=blah,DC=corp baseDN level with a scope of Whole Subtree
-> the partition being referred is DC=DomainDNSZones,DC=blah,DC=corp is in the subtree
Run the search against the Global Catalog (Port 3268) as this will not return referrals
You could instead change the BaseDN of the search if that is a viable option.
You could also just not follow referrals
Possible Solution run query on Global Catalog Port (3268) which will not return referrals
Ldap V3 specifically allows for referrals to be returned to the client instead of the server chasing them which occurred in previous versions of LDAP. This apparently was done for performance and from that angle it makes sense. You can have a couple of different types of referrals, continuation referrals meaning that here is some data you can possibly find some more information in these other locations and error referrals meaning the data absolutely is not at this location try elsewhere.