ActiveDirectoryMembership Provider 的 Asp.Net 会员资格
我们的登录控制和广告会员资格提供商仍然存在速度问题。
我们已经追踪到一个特定问题,当最初尝试第一次连接时,它会发送以下 SAM LOGON 消息:
117 10.717526 10.140.4.84 10.140.4.223 来自客户端的 SMB_NETLOGON SAM LOGON 请求
它在 udp 上发送了 4 个单独的时间端口 138 尝试连接到我们的 AD 服务器。
这需要 30 多秒,占我们登录时间的绝大多数。
有没有什么方法可以将广告会员权限配置为不尝试在此端口/SAM 登录上进行 udp,然后跳过该步骤?
或者有谁知道服务器上需要更改什么才能响应此请求?
机器之间没有防火墙或类似的东西。 他们使用同一个交换机。
谢谢,
We're having speed problems still with the login control and the Ad membership provider.
We've tracked it down to a specific issue, when initally trying to connect for the first time, it sends this SAM LOGON message:
117 10.717526 10.140.4.84 10.140.4.223 SMB_NETLOGON SAM LOGON request from client
It Gets sent 4 seperate time on udp port 138 trying to connect to our AD server.
This takes over 30 seconds, the vast majority of our login times.
Is there any way to configure the Ad Membership Privder to not attempt to udp on this port/SAM LOGON,and just skip that step?
or does anyone know what needs to be altered on the server to make it respons to this request?
There was no firewall or anything like that between the machines. They were on the same switch.
Thanks,
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
adServer 不接受 636 上的连接,因此我们必须设置 connectionprotection = none。
它没有在任何地方记录,但我必须将 ad\ 放在用户名前面
或连接 proteciton=none 引发错误。
修复此问题后,通信仅通过 385 进行,并且登录速度非常快。
电子-
adServer was notaccepting connections on 636 so we had to set connectionprotection = none.
it was not documetned anywhere, but I had to put ad\ in front of the username
or connection proteciton=none threw errors.
Once that was fixed the communication was only on 385 and login was very fast.
E-