IDP Login Delay Question

[Joseph Lucia]

I think I found my delay, but not sure what is causing it. This is from the debug logs, is this normal delay? It seems to be the Set hostname verifier for ldaps.

11:19:55.608 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:128] - Set hostname verifier for ldaps
11:20:00.630 - DEBUG [edu.vt.middleware.ldap.ssl.AggregateTrustManager:75] - invoking checkServerTrusted for sun.security.ssl.X509TrustManagerImpl at 2f73b909
11:20:00.643 - DEBUG [edu.vt.middleware.ldap.ssl.AggregateTrustManager:75] - invoking checkServerTrusted for edu.vt.middleware.ldap.ssl.HostnameVerifyingTrustManager at 33d40863

Thanks,

Joseph Lucia
Information Systems Specialist
Central York School District
717-846-6789 x1211
jlucia at cysd.k12.pa.us

From: Joseph Lucia <jlucia at cysd.k12.pa.us<mailto:jlucia at cysd.k12.pa.us>>
Reply-To: Shib Users <users at shibboleth.net<mailto:users at shibboleth.net>>
Date: March 25, 2014 Mar 25, 2014 ~ 10:48 AM
To: "users at shibboleth.net<mailto:users at shibboleth.net>" <users at shibboleth.net<mailto:users at shibboleth.net>>
Subject: IDP Login Delay Question

Good Morning,

I am seeing a short delay when I hit login before the authentication begins. Possibly this is normal, on submit, there is around a 4 to 5 second  delay on the login page, then the authentication happens. I thought possibly it was the number of attributes I was pulling from LDAP which consists of around 5 LDAP fields and 1 script to set affiliation to staff or student based on memberOf. The reason I am thinking it is something else is I did a Wireshark capture of the LDAP server and watched it as I hit login, during the 4 to 5 second delay I don't see any traffic on the AD server, then when the page finally submits, I see the traffic request for the login and the attributes happen within a fraction of a second.

I am not sure how to tell what is happening during that initial delay, and like I mentioned, this may be the normal behavior. I appreciate any ideas or assistance.

Regards,

Joseph Lucia
Information Systems Specialist
Central York School District
717-846-6789 x1211
jlucia at cysd.k12.pa.us<mailto:jlucia at cysd.k12.pa.us>
--
CONFIDENTIALITY NOTICE – This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message.
--
CONFIDENTIALITY NOTICE – This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140325/35270b04/attachment.html