Slow OWA 2010 Authentication

I've noticed lately that authentication on OWA 2010 is taking 1-2 minutes each time a user logs in. It doesn't matter if they're outside our network or inside. Once logged in, it runs perfectly, without lag. Any suggestions?
fza11404Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

e_aravindCommented:
> Check if you got any other ISAPI DLLs loaded @ the CAS-server?
(CAS server\sites\Default Web Site --> ISAPI (@ right-hand pane -- Features view))

Check for the list of modules loaded:
(CAS server\sites\Default Web Site\Owa --> Modules)


> Change the authentication for the iisstart.htm to basic-authentication
Try accessing the same
Check the response time

> you could also check the system logs for any clue?
0
fza11404Author Commented:
Under ISAPI Filters I have the following running:
AirFilter.dll
owaauth.dll
ISAPI_stubbing.dll
isapi_awv.dll

Under modules, I have 36 of them running. Is there any in particular I need to are or are not there?
 
I know how to change the OWA authentication, but where do I change the iisstart.htm authentication? Are they one in the same? When I set OWA to basic-authentication its still very slow.
0
sunnyc7Commented:
Can you configure OWA with Forms Based Authentication
Server Config > Client Access
Select Server on top pane > Right Click OWA in bottom pane > properties
Click Authentication tab
Select Radio - FBA
username only > (if you select that, select logon domain)

Restart FBA Service
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

fza11404Author Commented:
That's actually what its already set to. We're using forms-based, user name only, and I have the logon domain entered.
0
sunnyc7Commented:
DANG !
Let me think.

How many GC's do you have ? How many exchange servers ?
All in same site or different
0
fza11404Author Commented:
1 and 1...just one site.
0
sunnyc7Commented:
Please check this.
http://www.justinho.com/post/2010/04/11/Improving-Exchange-2010-OWA-Page-Loadtimes.aspx

The article uses Gzip compression to improve loading of all .js
I am testing this on my OWA
0
NenadicCommented:
What version of E2010 are you running? SP and RU?
0
fza11404Author Commented:
We are on SP1 and up to date on rollups.
0
fza11404Author Commented:
Hey Sunnyc7, I dont think that applies to our problem. All of our load times are fine, except for authentication.
0
fza11404Author Commented:
Current version: 14.01.0339.001
0
fza11404Author Commented:
There were some group policy changes made last week. We aren't real sure if this OWA slow down started right when those changes were made, but I figured I'd mention it in case that could be of help.
0
sunnyc7Commented:
Did you make any changes on InteractiveLogon / Logon / Security Settings in GPMC
Do you know what policies were those ?

did you run a RSOP ?
rsop.msc

I understand where you are coming from, but auth issues is usually related to GC/DC, or in this case it might be because of some GPO's. RSOP allows you to model how policies are getting applied.
0
e_aravindCommented:
Just a parallel question.

In the ISAPI filters, these two doesn't look like the *default* ones
ISAPI_stubbing.dll
isapi_awv.dll


> Can you check which programs adds these @ IIS?
If possible can you disable the same for testing...check for the OWA access?

Note:
In my earlier post, i want to check the speed\response from the IIS server
So you can toggle the authentication settings @ any of the basic files like iisstart.htm and collect more information.

0
fza11404Author Commented:
Sorry to leave this hanging...but we got it figured out. There were some conflicting Group Policies as I had originally suspected. Unfortunately, because neither of the current administrators set up this group policy, the easiest way to trouble shoot was to just hack the GP apart to bare bones and start rebuilding it. Something in there fixed our issue.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
fza11404Author Commented:
Answered internally
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.