[cvsnt] Re: Slow authentication with cvsnt and sspi

Peter Crowther Peter.Crowther at melandra.com
Wed Mar 2 14:19:17 GMT 2005


Community technical support mailing list was retired 2010 and replaced with a professional technical support team. For assistance please contact: Pre-sales Technical support via email to sales@march-hare.com.


> From: Tony Hoyle [mailto:tmh at nodomain.org] 
> The group enumration shouldn't take more than a fraction of a second 
> normally.  It sounds like the connection to your domain controller is 
> slow for some reason... this will be slowing down any 
> application that 
> needs to authenticate (plus NTFS access etc.) so it's well 
> worth looking into.

In an AD environment, it *may* also be worth checking whether the groups
are local, global or universal.  Tony, you'll know better than me - does
the enumeration have to go to a global catalog server in all cases / for
universal groups, or do all DCs have enough information in all cases?  I
know a GC has to be contacted when a user logs in to obtain group
information for that user, just in case they're in any universal groups,
and would assume the same to be the case for a server resolving groups
in an SSPI connection to that server.

		- Peter



More information about the cvsnt mailing list
Download the latest CVSNT, TortosieCVS, WinCVS etc. for Windows 8 etc.
@CVSNT on Twitter   CVSNT on Facebook