[Apache::AuthenNTLM] Performance Probs

[Fr...@gsk.com]

Hello,

I recently installed Apache::AuthenNTLM 0.21 on a Solaris 8 box running
Apache 1.3.26 with mod_perl. The trouble is now that the response times
are sometimes very slow, up to several tens of seconds. They are faster
with non-NTLM-browsers like Mozilla, in this case it's only the first
request that's painfully slow. The subsequent ones are ok.

Has someone an idea how I can improve the performance on this?

Thanks,
Frank


Entries in httpd.conf:

KeepAlive On
MaxKeepAliveRequests 0
KeepAliveTimeout 1800
AuthType ntlm,basic
AuthName "Intranet"

PerlAddVar ntdomain "ACCDOM SXPDC SXBDC"
PerlAddVar ntdomain "RESDOM SXPDC SXBDC"
# Several other Resource Domains here

PerlSetVar ntlmsemtimout 1
PerlSetVar defaultdomain eeu
PerlSetVar fallbackdomain eeu

PerlAuthenHandler Apache::AuthenNTLM

require valid-user

Re: [Apache::AuthenNTLM] Performance Probs

[Gerald Richter <ri...@ecos.de>]

Hello,
>
> I recently installed Apache::AuthenNTLM 0.21 on a Solaris 8 box running
> Apache 1.3.26 with mod_perl. The trouble is now that the response times
> are sometimes very slow, up to several tens of seconds. They are faster
> with non-NTLM-browsers like Mozilla, in this case it's only the first
> request that's painfully slow. The subsequent ones are ok.
>
> Has someone an idea how I can improve the performance on this?
>

Looks like that it gets slow when the AuthenNTLM needs to ask the windows
domain controller if the user/password is ok.

That could either be some dns lookup problems or network or windows
performance problems.

Can you resolve the names you use on the solaris box? e.g. when you enter

nslookup SXPDC
nslookup SXBDC

how long does it take?

The other thing is you have configurated

> PerlSetVar defaultdomain eeu
> PerlSetVar fallbackdomain eeu

but no definition for domain eeu, you shoudl add something like

PerlAddVar ntdomain "eeu SXPDC SXBDC"

If this still doesn't helps, set

PerlSetVar ntlmdebug 1

and send me the httpd error log of a slow request

Gerald



-------------------------------------------------------------
Gerald Richter    ecos electronic communication services gmbh
Internetconnect * Webserver/-design/-datenbanken * Consulting

Post:       Tulpenstrasse 5         D-55276 Dienheim b. Mainz
E-Mail:     richter@ecos.de         Voice:    +49 6133 925131
WWW:        http://www.ecos.de      Fax:      +49 6133 925152
-------------------------------------------------------------