How to check login duration time

Question

How to check login duration time

Anthony Azzopardi 6

Hello,

we are currently facing some login uncertainties for some of our applications. I would like to know whether or not we can capture the time it takes a specific user to authenticate with AD.

thank you

3 answers

Your answer

Answer 1

Gary Reynolds 9,621

Hi @Anthony Azzopardi

While it might seem like a simple question, unfortunately it's not, as it depends on your meaning of authenticate. The time it takes to authenticate a set of credentials against a domain controller, is a pretty simple process, i.e. issue a bind statement and measure how long it takes. NetTools provides an option to do just this see the LDAP Performance option for details. However, measuring how long it take a workstation or server to complete a logon process is a little more complicated, as the logon process is made up of multiple steps completed, both locally and over the network, with multiple requests to the domain controllers, with each one authenticating each time and dependent on the other factor both on the network and local workstation\server that can impact the performance.

Can you provide a bit more information on the problem you are investigating?

Gary.

Anthony Azzopardi 6 Reputation points

2022-01-21T10:54:31.69+00:00

Hello @Gary Reynolds

We have some propriety java applications using OAUTH server to authenticate with Active Directory. Our developers are stating that some of the logins are taking 20 secs and I need to check/confirm that the issue is not Active Directory related.

So basically I need to monitor how long a specific user is taking to authenticate with AD when the request is made.
Gary Reynolds 9,621 Reputation points

2022-01-24T03:05:01.103+00:00

Hi @Anthony Azzopardi

This is not a simple task, as I'm not aware of a single metric that will give you this answer from the AD point of view.

The approach that I would use, is first determine what logging you have on each component, i.e. app, oauth server, and AD. Then baseline the authentication process to understand the normal processing time and the correlation to each log entries. I would also confirm the configuration of each component and which servers or domain controllers they are using, in case it a specific server which results in a slow response time. I would also use the NetTools LDAP Performance option to confirm the authentication times and if there are any major deviation from the normal. I would also setup the performance monitor to capture a base trace of the common counters and counters specific to the AD i.e. Microsoft Active Directory, Kerberos & NTLM Authentication, LDAP Active Threads, LDAP Active Client Sessions, DRA Inbound Synchronization Objects Remaining, DRA Pending Replication Synchronization, Address Book Browses, and
Address Book Client Sessions. From there I would get the application team to provide details on when they are seeing any slow performance and you can review this against the logs, and if coincides with any schedule tasks, i.e. backups etc.

You could also look at the Field Engineering debug options to increase the event logging against the AD, however I wouldn't use these until you have completed the above, as they can impact the performance of the domain controller.

I hope that helps.

Gary.

Answer 2

Limitless Technology 39,926

Hello @Anthony Azzopardi

I would recommend the next official article about the tracing and logging tools, as well the troubleshooting approach.

https://social.technet.microsoft.com/wiki/contents/articles/10128.tools-for-troubleshooting-slow-boots-and-slow-logons-sbsl.aspx

Hope this helps with your query,

----------------

--If the reply is helpful, please Upvote and Accept as answer--

Answer 3

Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Comments have been turned off. Learn more

Share via

How to check login duration time

3 answers

Your answer