Bad performances on secondary server

Question

Hi Adaxes team,

We have a second Adaxes server in Asia (main one in Europe) and replication is workgin fine. The problem is that using Web interfaces on this server is painfully slow compared to the first one, just like if it needs to contact his counterpart in Europe for each action. Is there something i can check ?

Thanks in advance

Comments

Hello,

It looks like the Web Interface in Asia fails to connect to the nearest Adaxes service...

What version of Adaxes are you using? There was a known issue related to Adaxes service location, but the issue is fixed in the latest versions of Adaxes.

Are the Web Interface and Adaxes Service in Asia installed on the same computer?

Please have a look at the Adaxes Event Log on the computer where the Web Interface is installed. Are there any errors related to the issue?

---

Sorry for late reply.

Version : 3.3.8123.0
Web interface is colocated with Adaxes service
But you're right, there are some errors in eventlog !

When it times out :

Softerra.Adaxes.Web.Utils.LogMessageWrapperException: Failed to fetch the list of groups the user 'ap00sroux@ap.loi.net' belongs to. ---> System.Threading.ThreadAbortException: Thread was being aborted.
at Softerra.Adaxes.Web.Common.ManagedDomainCache.DetermineIfDefaultContextBindable(String domainName, String defaultNamingContext, IAdmService admService, NetworkCredential credential)
at Softerra.Adaxes.Web.Common.ManagedDomainCache.LoadCacheInfo(IHttpContext context)
at Softerra.Adaxes.Web.Common.ManagedDomainCache..ctor(IHttpContext httpContext)
at Softerra.Adaxes.Web.Authentication.ActiveDirectoryRoleProvider.UserDirectoryGroupFetcher..ctor(String username, List`1 roleContainer)
at Softerra.Adaxes.Web.Authentication.ActiveDirectoryRoleProvider.GetRolesForUser(String username)
--- End of inner exception stack trace ---

or

A server-side sponsor for client '1|APHKGRES02.ap.loi.net|APHKGRES02$@ap.loi.net|480|2' has expired. Sponsorship for its '1' registered CAOs will be discontinued.

I will dig it this ev a little bit more and post update if necessary

Thanks

---

Hello

Can you please connect to the Web Interface in Asia, perform an operation, and have a look in the Adaxes Log of the Adaxes service in Europe. Does the log contains a record for the operation?

---

No, the operation is well logged in Asia Adaxes server.

---

Hello,

It looks like the Adaxes service in Asia fails to find any available domain controllers located in Asia and connects to a DC located in Europe. Please make sure there is a DC in Asia that can be accessed by the Adaxes service.

---

We have on the same site a DC for the root domain and the Asia domain. We don't want local IT to manage other domains (for which we don't have DC on that site). What is the good setup then in Adaxes ? Because as we share the configuration, others domains appear in the list.

Thanks

Answer 1

I suggest you unregister all AD domains that you don't want to be managed from Asia only on the Adaxes service located in Asia, so that when a user connects to the Asian Adaxes service, he/she would be able to view only two domains (the root domain and the Asian domain).
Unregistering the domains that are not located in Asia may solve the performance issues because the Adaxes service will not try to perform queries in those domains.

Another option is to install a read-only domain controller in Asia.

Comments

Hello Stephen,

Ooh, that wasn't easy to find the reason, but I think we managed to.

Today or tomorrow we'll release a new update that'll hopefully fix the slowdowns in environments like yours.
I'll update this post as soon as the new build is available.

Note a strange thing : Adaxes can resolve SID/Guid to name (i can see all service administrators full name) if root domain is registered. If i unregister root domain, Adaxes only resolve local (Asian) account. I find it strange, because with Root domain registered it can resolve European account even if the Europe domain is not registered.

That was the key to find the problem.

---

Great to hear my long post was helpful :-)

Thanks a lot, i wait for the fix.

Regards

Stephen

---

Hello Stephen,

We've uploaded the new latest version.

Download URL
Upgrade Instructions

Please let me know whether the issue has gone. Thanks.

---

It seems to be far better ! I will give you an update next week, after few days of use.

Thanks

Stephen

---

Great!