Re: IIS Performance vs Authentication Type

From: Thomas Deml [MS] (thomad@online.microsoft.com)
Date: 10/19/02


From: "Thomas Deml [MS]" <thomad@online.microsoft.com>
Date: Sat, 19 Oct 2002 00:00:33 -0700


Rupesh,

Windows authentication takes longer because it needs to do three network
roundtrips until the user is authenticated. Once the connection is
established you shouldn't see a difference anymore.

Hope this helps.

--
Thomas Deml
Lead Program Manager
Internet Information Services
Microsoft Corp.
"Sanjeev" <sanjeev.gupta@ubswenergy.com> wrote in message
news:umj5sIudCHA.2400@tkmsftngp10...
> I am trying to learn about dot IIS Security as i was into a loop trying to
> figure out why my webpage works on the pc where my iis server is and does
> not run from any other machine.
> I guess this topic should help you a little that why ntlm takes a little
> more time than basic
>
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/vsent7/html
> /vxconIISAuthentication.asp
>
> Sanjeev
>
>
> "Rupesh Manugula" <mrupesh@cal.cognizant.com> wrote in message
> news:65cc01c276ac$54d23530$2ae2c90a@phx.gbl...
> > Hi,
> >
> > I have a query related to the impact of authentication
> > type on IIS performance.
> >
> > I have observed that in our web application, when we
> > change the authentication from Basic to
> > Integrated, the response time of a page is slightly more.
> > In one of the popup asp pages,
> > when it was submitted, I observed that it took more time
> > in case of integrated
> > authentication. Though the difference seems to be very
> > small but I am afraid of its
> > impact if the number of users are significantly high.
> >
> > Is this an expected behaviour, if so, how does
> > authentication type impact the IIS performance.
> >
> > Or, is it a network issue since in case of integrated
> > authentication, the user is validated at the domain
> > controller/active directory.
> >
> > Please comment.
> >
> > Thanks
> > Rupesh Manugula
>
>


Relevant Pages

  • IIS Performance vs Authentication Type
    ... I have a query related to the impact of authentication ... the response time of a page is slightly more. ... small but I am afraid of its ... authentication type impact the IIS performance. ...
    (microsoft.public.inetserver.iis.security)
  • RE: Wireless Security Notes and Findings (from this list and other places)
    ... There are two general areas of wireless security: Authentication and ... authentication standard that works with wireless networks. ... client computer runs a client program to connect to the network with a ...
    (Security-Basics)
  • Re: IP address assignment problem
    ... I have a little problem and seek for ur thoughts, let's assume I'm in a very open environment where everyone can very easily try to get his/her laptop on the network and IP addresses are assigned by a DHCP server and we are in a domain environment, how do I prevent machines that are not part of our domain to be assigned an IP address? ... This approach doesn't stop your rogue clients from connecting to other clients, but merely doesn't give them the information they normally need to do so. ... Using 802.1x, your workstations authenticate through the switch to a radius server before they are allowed any connectivity. ... This authentication can use X.509 certificates, computer account credentials from AD, or whatever else you'd normally configure radius to authenticate with. ...
    (Focus-Microsoft)
  • Re: Kerberos machine authentication - apparent authentication failures
    ... When you joined your computer to the domain your wireless network card was ... denied access until you can authenticate to a domain controller as a user. ... While kerberos is the default authentication protocol of choice, ...
    (microsoft.public.windows.server.security)
  • RE: 802.1x, Computers, Wired Security
    ... client to use EAP-TLS. ... Authentication-Provider = Windows ... Wired 802.1X Authentication failed. ... Network Adapter: Broadcom NetXtreme Gigabit Ethernet - Packet Scheduler ...
    (microsoft.public.windows.server.active_directory)