There's an article in the U2 knowledgebase on this which may help: "Forcing authentication toa Child Domain" http://www-1.ibm.com/support/search.wss?rs=629&tc=SSCRY4&q=active+directory
Regards JayJay -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Thomas Derwin Sent: 21 December 2006 20:25 To: [email protected] Subject: RE: [U2] Active Directory and UniVerse Hi Brian, Could it be DNS configuration rather than Active Directory? Telnet does a reverse-DNS lookup when it initiates a session, and if there's no response from DNS, telnet waits about 50 seconds before it times out, connects, and displays the login prompt. After the user gets the login prompt, everything works normally. For some reason, this 50-second delay drives users nuts. We've run into this two different ways: 1) DNS server was hung. 2) The block of IP addresses wasn't entered into the reverse-lookup table on the DNS server. Hope this helps, Tom Derwin >>> [EMAIL PROTECTED] 12/21/06 12:22 PM >>> Tony Thanks for the info. It seems to be down to the fact that this is a child domain in the AD tree. The telnet service is authenticating to the root server not to the local domain controller: on both sites the root servers are not local (situated on different continents) and the service is enumerating each individual group membership from the PDC (each with a separate RPC call). Which is of course horribly slow. Brian > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Anthony Caufield > Sent: 21 December 2006 16:19 > To: [email protected] > Subject: RE: [U2] Active Directory and UniVerse > > We used to have this problem at one of our site but we added > a domain controller to that site and that took care of it. Do > you have the same problem if you log into the server using > local admin or a local user (setup on that server) > > Tony Caufield > IS Manager > Harbor Wholesale Grocery Inc. > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Brian Leach > Sent: Thursday, December 21, 2006 1:48 AM > To: [email protected] > Subject: [U2] Active Directory and UniVerse > > All, > > I have an urgent issue and hope someone can help me out. > > I have two sites experiencing problems logging into UniVerse > TELNET sessions when using Active Directory for authentication. > Both are running on Windows 2003 server SP1 with appropriate > versions of UniVerse. > > The problem they both face is a long wait when connecting: up > to a minute between entering the password and logging into UniVerse. > However, using a remote desktop or other windows connection > to the same machine using the same credentials, results in an > immediate authentication, so it seems specific to the UniVerse telnet. > > Has anyone experienced this? Any idea how I can overcome this? > I'm not running AD here, so I can't reproduce the issue > myself (without a lot of time spent setting up an AD tree). > > Thanks > > Brian > ------- > u2-users mailing list > [email protected] > To unsubscribe please visit http://listserver.u2ug.org/ > ------- > u2-users mailing list > [email protected] > To unsubscribe please visit http://listserver.u2ug.org/ ------- u2-users mailing list [email protected] To unsubscribe please visit http://listserver.u2ug.org/ ----------------------------------------- This e-mail and any attachments may contain CONFIDENTIAL information, including PROTECTED HEALTH INFORMATION. If you are not the intended recipient, any use or disclosure of this information is STRICTLY PROHIBITED; you are requested to delete this e-mail and any attachments, notify the sender immediately, and notify the LabCorp Privacy Officer at [EMAIL PROTECTED] or call (877) 23-HIPAA / (877) 234-4722. ------- u2-users mailing list [email protected] To unsubscribe please visit http://listserver.u2ug.org/ ------- u2-users mailing list [email protected] To unsubscribe please visit http://listserver.u2ug.org/
