[krbdev.mit.edu #6873] Network Identity manager is very slow to return when obtaining tickets over the VPN

[Stuart Peloquin via RT]

It appears as though this is a bug.  Network Identity Manager takes a very long time to return when obtaining new credentials over the VPN.  This is more pronounced on slower network connections.  Delays of around 1 minute on a wireless connection here on campus in comparison to 2-3 minutes when connecting from off campus.

It appears as though there are valid tickets created right away, but the authentication dialog box stays open for some time afterwards.  I included screen shots below to show that valid tickets are created at 12:47:39, but the authentication dialog box doesn't go away until 12:48:23.  About 40 seconds.  This time is more when on a slower network connection like DSL.

In testing, applications that use Network Identity Manager to get tickets for authentication, ex. SAPGui,  seem to wait until this authentication dialog is gone before finding the tickets.  This problem was noticed by Steve Landry while working on RT ticket #1219033 (https://help.mit.edu/Ticket/Display.html?id=1219033).

Any idea as to why Network Identity Manager is taking so long to return after obtaining tickets when connecting via the VPN?

If you have any questions, please feel free to ask.


[cid:image002.jpg at 01CBD358.CBBCC540]


[cid:image004.jpg at 01CBD358.CBBCC540]

--
Stuart Peloquin
Extended Infrastructure Support Team Lead
MIT Computing Help Desk
Information Services and Technology
peloquin at mit.edu
617 324 6557