Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Slow OWA 2010 Authentication

Posted on 2011-10-12
16
Medium Priority
?
693 Views
Last Modified: 2012-05-12
I've noticed lately that authentication on OWA 2010 is taking 1-2 minutes each time a user logs in. It doesn't matter if they're outside our network or inside. Once logged in, it runs perfectly, without lag. Any suggestions?
0
Comment
Question by:fza11404
  • 9
  • 4
  • 2
  • +1
16 Comments
 
LVL 26

Expert Comment

by:e_aravind
ID: 36961026
> Check if you got any other ISAPI DLLs loaded @ the CAS-server?
(CAS server\sites\Default Web Site --> ISAPI (@ right-hand pane -- Features view))

Check for the list of modules loaded:
(CAS server\sites\Default Web Site\Owa --> Modules)


> Change the authentication for the iisstart.htm to basic-authentication
Try accessing the same
Check the response time

> you could also check the system logs for any clue?
0
 

Author Comment

by:fza11404
ID: 36964781
Under ISAPI Filters I have the following running:
AirFilter.dll
owaauth.dll
ISAPI_stubbing.dll
isapi_awv.dll

Under modules, I have 36 of them running. Is there any in particular I need to are or are not there?
 
I know how to change the OWA authentication, but where do I change the iisstart.htm authentication? Are they one in the same? When I set OWA to basic-authentication its still very slow.
0
 
LVL 28

Expert Comment

by:sunnyc7
ID: 36965297
Can you configure OWA with Forms Based Authentication
Server Config > Client Access
Select Server on top pane > Right Click OWA in bottom pane > properties
Click Authentication tab
Select Radio - FBA
username only > (if you select that, select logon domain)

Restart FBA Service
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 

Author Comment

by:fza11404
ID: 36965334
That's actually what its already set to. We're using forms-based, user name only, and I have the logon domain entered.
0
 
LVL 28

Expert Comment

by:sunnyc7
ID: 36965349
DANG !
Let me think.

How many GC's do you have ? How many exchange servers ?
All in same site or different
0
 

Author Comment

by:fza11404
ID: 36965590
1 and 1...just one site.
0
 
LVL 28

Expert Comment

by:sunnyc7
ID: 36965625
Please check this.
http://www.justinho.com/post/2010/04/11/Improving-Exchange-2010-OWA-Page-Loadtimes.aspx

The article uses Gzip compression to improve loading of all .js
I am testing this on my OWA
0
 
LVL 12

Expert Comment

by:Nenadic
ID: 36965676
What version of E2010 are you running? SP and RU?
0
 

Author Comment

by:fza11404
ID: 36970939
We are on SP1 and up to date on rollups.
0
 

Author Comment

by:fza11404
ID: 36970944
Hey Sunnyc7, I dont think that applies to our problem. All of our load times are fine, except for authentication.
0
 

Author Comment

by:fza11404
ID: 36970965
Current version: 14.01.0339.001
0
 

Author Comment

by:fza11404
ID: 36971213
There were some group policy changes made last week. We aren't real sure if this OWA slow down started right when those changes were made, but I figured I'd mention it in case that could be of help.
0
 
LVL 28

Expert Comment

by:sunnyc7
ID: 36971271
Did you make any changes on InteractiveLogon / Logon / Security Settings in GPMC
Do you know what policies were those ?

did you run a RSOP ?
rsop.msc

I understand where you are coming from, but auth issues is usually related to GC/DC, or in this case it might be because of some GPO's. RSOP allows you to model how policies are getting applied.
0
 
LVL 26

Expert Comment

by:e_aravind
ID: 36987485
Just a parallel question.

In the ISAPI filters, these two doesn't look like the *default* ones
ISAPI_stubbing.dll
isapi_awv.dll


> Can you check which programs adds these @ IIS?
If possible can you disable the same for testing...check for the OWA access?

Note:
In my earlier post, i want to check the speed\response from the IIS server
So you can toggle the authentication settings @ any of the basic files like iisstart.htm and collect more information.

0
 

Accepted Solution

by:
fza11404 earned 0 total points
ID: 37024554
Sorry to leave this hanging...but we got it figured out. There were some conflicting Group Policies as I had originally suspected. Unfortunately, because neither of the current administrators set up this group policy, the easiest way to trouble shoot was to just hack the GP apart to bare bones and start rebuilding it. Something in there fixed our issue.
0
 

Author Closing Comment

by:fza11404
ID: 37052177
Answered internally
0

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

There can be many situations demanding the conversion of Outlook OST files to PST format and as such, there is no shortage of automated tools to perform this conversion. However, what makes Stellar OST to PST converter stand above the rest? Let us e…
You finally migrated Public Folders to Office 365, decommissioned the Public Folder mailbox database and since then, when you send an email from on-premise to mail-enabled Public Folders, you get the following error: "Misconfigured public folder mai…
Many of my clients call in with monstrous Gmail overloading issues with Outlook. A quick tip is to turn off the All Mail and Important folders from synching. Here is a quick video I made to show you how to turn off these and other folders in Gmail s…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses
Course of the Month12 days, 4 hours left to enroll

564 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question