Windows SSO authentication client query mode performance issue

book

Article ID: 167635

calendar_today

Updated On:

Products

ProxySG Software - SGOS

Issue/Introduction

When using Windows SSO authentication, for Client Query type of setup, (000011375 or 000013377) sometimes the Client query may have been slow, especially when the DC of the users logon to are down. The User may wait for 1-2 min for Windows SSO to finish username query, than allowing user to access to internet.

Resolution

The workaround is:
Setting “MaxSSOThreads=10” in BCAAA’s sso.ini [Setup] section. usually in installed location:
C:\Program Files\Blue Coat Systems\BCAAA
Save it and restart BCAAA service.

Also, follow http://blogs.technet.com/ad/archive/2008/09/23/ntlm-and-maxconcurrentapi-concerns.aspx

"The maximum recommended number is 5, though it can be set to 10.  This is a setting which can help if set on application server (ISA in this case) and domain controller involved."
Run widnows regedit to setup:
Key: HKLM\System\CurrentControlSet\Services\Netlogon\Parameters
Value name: MaxConcurrentAPI
Value type: REG_DWORD

set to the recommended value: 10
save and restart the windows server.