== Problem description:
OpenSSOAutoLogin.java executes the importLDAPUser method each time the auto-login filter calls it. Will doing debug tracing, I found that this would basically be on most requests impacting performance. You should only need to import the details from LDAP when the user session is first created.
I will attach a patch that at this point is very basic. The patch sets a session attribute in OpenSSOFilter.java to indicate that the import is required. In OpenSSOAutoLogin, this attribute gets reset once the import is complete, A new request for an import will only be done in OpenSSOFilter if the users session is a new one.