• Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Minor Minor
    • Jenkins version: 2.387.3
      Active Directory Plugin version: 2.31
      openjdk version: 1.8.0_312

      After ad authentication is configured, the authentication process is very slow

      From the capture of packets, there are several places with a large delay (multiples of 30 seconds).

       

       

       

          [JENKINS-71872] The AD authentication process is very slow

          isaac added a comment -

          ps:

          1. Our network has three zones with two ad servers in each zone. There are six ad servers in total.

          The jenkins server belongs to one of these zones, unlike the ad servers with the other two zones.

          2. The port of [Domain controller] parameter of the ad plug-in is 389

          The cause of the problem:

          During the authentication process, jenkins attempted to establish a connection with the ad servers in the other two zones, but the tcp syn packet failed after four retransmissions (15 seconds) due to the network failure. Another 15 seconds later, he tries to establish a tcp connection with another server, and so on.

          The solution:

          After the port number of the Domain controller parameter of the ad plug-in is changed to 3268, the problem disappears.

          isaac added a comment - ps: 1. Our network has three zones with two ad servers in each zone. There are six ad servers in total. The jenkins server belongs to one of these zones, unlike the ad servers with the other two zones. 2. The port of [Domain controller] parameter of the ad plug-in is 389 The cause of the problem: During the authentication process, jenkins attempted to establish a connection with the ad servers in the other two zones, but the tcp syn packet failed after four retransmissions (15 seconds) due to the network failure. Another 15 seconds later, he tries to establish a tcp connection with another server, and so on. The solution: After the port number of the Domain controller parameter of the ad plug-in is changed to 3268, the problem disappears.

            fbelzunc FĂ©lix Belzunce Arcos
            isaacgao isaac
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: