0 votes

Hello -

It seems we've been experiencing some slow performance via the web interface lately. It was reported to me that it seem to have gotten bad within the last week. It happens more so when an object is clicked on after a search, but also on a regular search.
We are on version 3.7.12818.0. No major changes to our AD infrastructure, so I'm not sure where to start to troubleshoot.
We only have 1 server that caters to Adaxes.

Thank You

by (1.7k points)
0

ports are good to go.
I sent the email. thanks!

0

Hello,

It looks like the delays are related to Office 365. Did you register an Office 365 Tenant in Adaxes? How long ago did you do that? Were there any changes related to Office 365 recently? For example, maybe you added a big number of users to Office 365 or migrated a bunch of mailboxes to the cloud?

Also, can you send us a copy of Adaxes Event log? For information on how to access it, see the following help article: http://www.adaxes.com/help/?ServiceAdmi ... ntLog.html.

0

Hi,

We upgraded to the current version 3/24/16.
I will find out about how many accounts were migrated from then until now, although I don't believe its a ton.
I will send the logs in the interim via email. Thank You.

0

As per the Helpdesk about 5 accounts were created and or migrated give or take.

0

Hi,

just checking in to see if anything was found via the logs.

Thanks

1 Answer

0 votes
by (216k points)

Hello,

Judging by the Event Log, there are indeed certain issues with connecting to your Office 365 tenant. Are you able to manage Office 365 properties of users with the help of Adaxes? Are you able to assign or revoke Office 365 licenses? It seems like Adaxes cannot perform any operations in Office 365 at all. Since Adaxes cannot normally connect to Office 365, time is wasted to fetch Office 365 properties of users, which causes the Web Interface performance issues.

Also, judging by the errors, when Adaxes fails to perform an operation in Office 365, this caused by the fact that the Azure AD Module for PowerShell receives malformed XML responses from Office 365. Do you have some sort of proxy or something like that in between the computer where Adaxes is installed and Office 365? It looks like there is some proxy that alters headers of HTTP responses from Office 365, which results in the ability to interpret those responses by the Azure PowerShell Module.

We recommend that you try removing all items from the Activity Scope of your Office 365 Tenant and checking whether this fixes the Web Interface issue.

0

Thank You.

I will take a further look.
Upon an initial look via Cloud Services in the Adaxes Console, the dirSync date reflects march 28, 2016. Does that indicate the last time the DirSync took place according to Adaxes ?
When I view the Synchronization Service Mgr, the last sync data reflects today.

We typically do not use proxies here, so don't believe there's one between O365 and the Adaxes server.

I just viewed some objects and tried to look at the O365 properties, and it said "the user doesn't have an office 365 account". So, there is a disconnect...this is weird b/c when it was upgraded I tested a few accounts and was able to see the properties. Not sure when and how that disconnect happen.

Also - reg the managed tenant, I've only listed my account there. Since the helpdesk uses Adaxes to manage etc, would their accounts need to be listed there as well? They have admin right within O365.

I've removed the items and the performance is definitely back to normal, i.e fast and as expected.

0

Hello,

The behavior that you describe clearly indicates that Adaxes cannot connect to Office 365. To help you troubleshooting the issue, on the computer where Adaxes is installed, can you launch the Microsoft Azure AD PowerShell Module and try establishing a connection to your Office 365 Tenant using the Connect-MsolService cmdlet and the credentials you specified when registering the tenant? Can you try the same from the computer that performs directory synchronization?

Also, alongside with XML errors, there are also Access Denied errors when connecting to Exchange Online. Can you check that the account you used when registering the tenant is assigned either to the Global Administrator or the User Management Administrator role in Office 365?

Also - reg the managed tenant, I've only listed my account there. Since the helpdesk uses Adaxes to manage etc, would their accounts need to be listed there as well? They have admin right within O365.

You need to assign a Security Role that allows Office 365 account management to your helpdesk guys. For more information, see Grant Permissions to Perform Office 365 Management Tasks. If they also need to perform certain operations with Exchange Online mailboxes, also have a look at Grant Permissions to Perform Exchange Tasks

0

Hi -

I was able to successfully connect via Azure AD Module from the Adaxes and from the same computer that performs Dir sync using the credentials used when registering the tenant.
The account being used is a Global Admin.
yes yes, HD already has the permission to write O365 properties.

Related questions

0 votes
1 answer

We are struggeling with a bit slow response from the webinterface. Standing on the Home page then clicking the Search tab, it takes about 5 seconds until it loads. ... in the release notes about performance enhancements for the web interface in version 2012.2)

asked Nov 15, 2013 by kjesoo (960 points)
0 votes
1 answer

I am noticing both with 2013.1 and 2013.2 that inital page load for each app is very sluggish, however subsiquent loads are awesome...I have seen a few posts in the back ... app pool is the root but not sure thoughts on IIS Performance tuning for IIS 7.5??

asked Nov 4, 2013 by kf4ape (490 points)
0 votes
0 answers

Hi, I've got very slow perf on web AdaxesADmin interface. I've done search in this forum, ad firewall rule to open 389,636,3268,88,135,49152-65535 ports on my ... .Stop() give me : 'serveur RPC pas disponible. HRESULT 0x8007068A' Resolving AdsPAth: 5596 ms

asked Nov 8, 2018 by Nicolas.lussier (190 points)
0 votes
1 answer

I added a chart based on report "soon-to-expire passwords" to the homepage. In Adaxes console, it will show a chart with time/date of when the password will expire. In the ... the report in web interface, it will show data but the chart will still be blank.

asked Mar 20 by tromanko (180 points)
0 votes
1 answer

What I'm trying to accomplish: user should have access to modify certain accounts where customTextAttribute2="test" (example). When I modify the criteria under "object selection" ... to query custom attributes or do you have to use AD attributes for this?

asked Mar 19 by tromanko (180 points)
3,326 questions
3,026 answers
7,727 comments
544,679 users