On 10/10/13 12:56, A.L.M.Buxey@lboro.ac.uk wrote:
Hi,
Thu Oct 10 11:52:16 2013 : Info: WARNING: Module rlm_eap became unblocked for request 47516341
...since the return of our students this year.
I am 99% sure this is ntlm_auth being slow, and I have a strong suspicion this is related to some changes in our AD infrastructure over the summer.
I've contacted our AD guys about a couple of tweaks they can do for 'legacy'
Any chance you can point me in the direction of these?
authentications (as microsoft call it) - but I'm also looking at samba4 - as it has a new option that will balance ntlm_auth against all known boxes rather than the first box it latches onto - to spread the load.
Hmm.
I'm also now getting suspicious about a couple of tuesday patches that got deployed over summer...
Interesting - which ones?
(we're also thinking about EAP-TLS again ;-) )
Semi-related, but to my annoyance we're seeing rather less SSL resumption than I would expect, given that iOS and Android both do it by default.