JayJay Thanks! That article confirmed our suspicions.
Have a good Christmas. Brian >There's an article in the U2 knowledgebase on this which may help: > >"Forcing authentication toa Child Domain" >http://www-1.ibm.com/support/search.wss?rs=629&tc=SSCRY4&q=active+directory > >Regards > >JayJay > > > >-----Original Message----- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] On Behalf Of Thomas Derwin >Sent: 21 December 2006 20:25 >To: [email protected] >Subject: RE: [U2] Active Directory and UniVerse > >Hi Brian, > >Could it be DNS configuration rather than Active Directory? > >Telnet does a reverse-DNS lookup when it initiates a session, and if >there's no response from DNS, telnet waits about 50 seconds before it >times out, connects, and displays the login prompt. > >After the user gets the login prompt, everything works normally. > >For some reason, this 50-second delay drives users nuts. > >We've run into this two different ways: >1) DNS server was hung. >2) The block of IP addresses wasn't entered into the reverse-lookup >table on the DNS server. > >Hope this helps, >Tom Derwin > >>>> [EMAIL PROTECTED] 12/21/06 12:22 PM >>> >Tony > >Thanks for the info. > >It seems to be down to the fact that this is a child domain in the AD >tree. >The telnet service is authenticating to the root server not to the local >domain controller: on both sites the root servers are not local >(situated on >different continents) and the service is enumerating each individual >group >membership from the PDC (each with a separate RPC call). Which is of >course >horribly slow. > >Brian > > > >> -----Original Message----- >> From: [EMAIL PROTECTED] >> [mailto:[EMAIL PROTECTED] On Behalf Of >> Anthony Caufield >> Sent: 21 December 2006 16:19 >> To: [email protected] >> Subject: RE: [U2] Active Directory and UniVerse >> >> We used to have this problem at one of our site but we added >> a domain controller to that site and that took care of it. Do >> you have the same problem if you log into the server using >> local admin or a local user (setup on that server) >> >> Tony Caufield >> IS Manager >> Harbor Wholesale Grocery Inc. >> >> >> -----Original Message----- >> From: [EMAIL PROTECTED] >> [mailto:[EMAIL PROTECTED] On Behalf Of Brian Leach >> Sent: Thursday, December 21, 2006 1:48 AM >> To: [email protected] >> Subject: [U2] Active Directory and UniVerse >> >> All, >> >> I have an urgent issue and hope someone can help me out. >> >> I have two sites experiencing problems logging into UniVerse >> TELNET sessions when using Active Directory for authentication. >> Both are running on Windows 2003 server SP1 with appropriate >> versions of UniVerse. >> >> The problem they both face is a long wait when connecting: up >> to a minute between entering the password and logging into UniVerse. >> However, using a remote desktop or other windows connection >> to the same machine using the same credentials, results in an >> immediate authentication, so it seems specific to the UniVerse telnet. >> >> Has anyone experienced this? Any idea how I can overcome this? >> I'm not running AD here, so I can't reproduce the issue >> myself (without a lot of time spent setting up an AD tree). >> >> Thanks >> >> Brian >> ------- >> u2-users mailing list >> [email protected] >> To unsubscribe please visit http://listserver.u2ug.org/ >> ------- >> u2-users mailing list >> [email protected] >> To unsubscribe please visit http://listserver.u2ug.org/ >------- >u2-users mailing list >[email protected] >To unsubscribe please visit http://listserver.u2ug.org/ > >----------------------------------------- >This e-mail and any attachments may contain CONFIDENTIAL >information, including PROTECTED HEALTH INFORMATION. If you are not >the intended recipient, any use or disclosure of this information >is STRICTLY PROHIBITED; you are requested to delete this e-mail and >any attachments, notify the sender immediately, and notify the >LabCorp Privacy Officer at [EMAIL PROTECTED] or call (877) >23-HIPAA / (877) 234-4722. >------- >u2-users mailing list >[email protected] >To unsubscribe please visit http://listserver.u2ug.org/ >------- >u2-users mailing list >[email protected] >To unsubscribe please visit http://listserver.u2ug.org/ ------- u2-users mailing list [email protected] To unsubscribe please visit http://listserver.u2ug.org/
