I've been notified from my Domain Administrator that the SVN server is hammering the ADS servers with authentication requests.. (excess of 10/sec at times) Apparently, the Windows Authentication module authenticates against the ADS server for EVERY PATH/FILE combination it encounters... so if for example the svn tree contained 1000 unique paths, with 100 files in each path... and a user downloads the entire tree... there are 100,000 authentication requests that are fired to the ADS server in our domain.
This is also the same when a user runs a LOG command against a path.. Every folder/subfolder/file is authenticated against and when compared to the same tree being aceessed via svn:// with subversion authentication vs: Visual Svn's http"// with windows authentication the times are extraordinarily different.. ex. I run a log command against the Root Folder using the svn:// path with tortoisesvn and receive results back within 60 seconds.... when I run the same log command against the Root Folder using http:// and VisualSVN Server it takes >5 minutes before results are returned.. and the Domain Admin tells me that the svn server is Hammering the ADS server with authentication requests... My question is this... Can the Visual SVN server's windows authentication module cache the authentication data internally for at least a couple minutes instead of making a new auth request for each and every folder in the tree???
