ISA HTML Logon Times
- Environment:
Server 2008 x64 Domain Controllers (qty 3)
ISA Server 2006 SP1 Enterprise (qty 2) - running on Windows Server 2003 x86 SP2
ISA configured in single NIC configuration
Issue:
We have a very simple test ISA setup, but would like to roll into production usage at some point. I have a single web listener configured to provide forms based authentication. I have two web publishing rules configured to provide proxying to our internal Exchange Client Access Servers for Outlook Web Access and Exchange ActiveSync. When the web listener is configured with the "Allow users to change their passwords" setting, the logon time increases to approximately 59 seconds. When the web listener is not configured with the "Allow users to change their passwords" setting, the logon time is less than 1 second.
Why does this setting increase the logon times so much? Where can I look at to troubleshoot and determine root cause? Suggestions welcome.
Trevor
Answers
Hi,
Thank you for your update.
To get a better understand about this issue. I suggest you use ISABPA to repro this and collect data and configuration (e.g. is LDAP or AD auth in use).
ISABPA in Repro Mode
ISA BPA can be downloaded and installed from the following location:
After installing this please run the ISA Data Packager from the Start, Programs, ISA Server, ISA Tools menu
Select the ‘Collect data from one of the following repro scenarios’ radio button and select the ‘Basic Repro and Static Configuration’ option, select ‘Next’ and then ‘Start Data Collection’.
When the ISA Data Packager has initialized the various data captures you will be asked to press the Spacebar to start capturing data. This is going to capture a number of data outputs from a repro of the issue (Network traces, ISA tracing output, ISA logs) so before running this and pressing the spacebar please get set-up to repro the issue.
When you are ready to repro the issue press the spacebar, repro the issue and then press the spacebar again to stop the captures. If you can try to keep this the time you are capturing quite short that will help our analysis of the data.
The BPA will also gather config data from the ISA server that will help us understand your set-up and will output all the data captures to a file on the desktop called isapackage.cab
After collecting all log files, Please use Windows Live SkyDrive (http://www.skydrive.live.com/) to upload the file and then give us the download address.
Regards,
Nick Gu - MSFT- Marked As Answer byNick Gu - MSFTMSFT, ModeratorThursday, November 12, 2009 5:47 AM
All Replies
Hi,
Thank you for the post.
According to your description, I understand the problem you are experiencing is logon time is different when web listener configured with “allow users to change their passwords” settings.
As far as I know, the logon time can be configure at “treat as maximum session duration” (web listener/properities/Forms/Advanced). Please confirm the session timeout.
Regards,
Nick Gu - MSFT- Hi Nick,
Thanks for the response.
I think you've misunderstood my issue. My issue is the time it takes between clicking the "Log On" button on my FBA web listener page and when I finally see Outlook Web Access. When the web listener is configured with the "Allow users to change their passwords" setting (web listener>Properties>Forms), it takes 59 seconds for the above scenario. When the web listener is NOT configured with the "Allow users to change their passwords" setting, the logon takes less than 1 second.
Regarding your inquiry, the web listener is configured for maximum idle time, not session duration. Regardless of those settings, I don't believe that would have any effect on the time it takes for logon (as described above).
I want to know why enabling the password change setting increases the logon times by such a substantial amount.
Trevor Hi,
Thank you for your update.
To get a better understand about this issue. I suggest you use ISABPA to repro this and collect data and configuration (e.g. is LDAP or AD auth in use).
ISABPA in Repro Mode
ISA BPA can be downloaded and installed from the following location:
After installing this please run the ISA Data Packager from the Start, Programs, ISA Server, ISA Tools menu
Select the ‘Collect data from one of the following repro scenarios’ radio button and select the ‘Basic Repro and Static Configuration’ option, select ‘Next’ and then ‘Start Data Collection’.
When the ISA Data Packager has initialized the various data captures you will be asked to press the Spacebar to start capturing data. This is going to capture a number of data outputs from a repro of the issue (Network traces, ISA tracing output, ISA logs) so before running this and pressing the spacebar please get set-up to repro the issue.
When you are ready to repro the issue press the spacebar, repro the issue and then press the spacebar again to stop the captures. If you can try to keep this the time you are capturing quite short that will help our analysis of the data.
The BPA will also gather config data from the ISA server that will help us understand your set-up and will output all the data captures to a file on the desktop called isapackage.cab
After collecting all log files, Please use Windows Live SkyDrive (http://www.skydrive.live.com/) to upload the file and then give us the download address.
Regards,
Nick Gu - MSFT- Marked As Answer byNick Gu - MSFTMSFT, ModeratorThursday, November 12, 2009 5:47 AM
