User Sign-in Delay

[Urton_]

Is anyone else seeing a delay (about 30 seconds) from the time a user signs in at their sign-in page to the time they actually get their page?

I just started seeing this once I upgraded from 6.4R1 to 6.5R5. I'm probably going to role back, but I wanted to know if anyone else is seeing this?

[pkc_]

Depending on your config some softwares can be installed before access is granted.

Do you systematically have the delay or only after the first post upgrade login ?

[Urton_]

Pre 6.5R5 upgrade, there was no delay. Post 6.5R5 upgrade, there is a delay every time. I don't have SAM or NC enabled for these users and the RDP terminal session client downloads on first use of a terminal session.

[Steffen_]

Hi,

since we use 6.5 we had some users reporting a long delay. Can't tell if exactly 30 seconds butsomething around that.

No all users report this, but a few do. We use LDAP auth to an Active Directory forest and have not autoloaded hostchecker, WSAM, NC or anything like this.

I have at least one user starting NC direct who reports the same.

I haven't found anything so far, nor can I savely reproduce it.

- Steffen

[Urton_]

Thanks for the input Steffen. I was wondering if the realms your users were experiencing a delay with were configured pre 6.5 or post? All mine were configured pre and I was going to create a test realm to see if I get a delay with users signing in to realms created post 6.5. 99.9% sure that isn't going to change a thing, but who's busy???

[Niol_]

It can happen when users are not allowed to install the Juniper installer Activex control in IE. After 30 seconds, IVE will switch to a Java applet.

But this scenario is not related to any change of version, it's purely a client side problem. Delay related to ActiveX should happen with non IE browsers.

[zanyterp_]

Do you have Host Checker or Cache Cleaner enabled; if yes, is the delay when these are running or after?

Do you have VDI or Citrix Listed Apps enabled? If yes, all of these need to load before the user screen can be displayed. The more available, the longer the time to load.

What do you use for AAA: AD/NT, LDAP, or other?

[Urton_]

I don't have HC, CC, VDI, or Citrix enabled.

Also, I have 4 SA 4500s in use (1 lab) and I did not experience a delay on any of themr when I was running 6.4R1. It was immediately after upgrading when I tested roles on each device. I use AD for AAA (before and after upgrade).

I did notice when I logged into a role using a workstation that is running IE 8, that it was blocking an add-on and then requested permission to run a Java applet (like previous post had said), but this wasn't the case pre upgrade.

Thanks for the input.

[icmp_]

I am using 6.5R3. Found that Host Checker took very long time, 3-4 minutes before moving to welcome page. I did evaluate 4 policies with HC. However, though I checked with only one policy but still that it took very long time to finish. Any one experienced the same?

[zanyterp_]

---

@Urton wrote:

I don't have HC, CC, VDI, or Citrix enabled.

Also, I have 4 SA 4500s in use (1 lab) and I did not experience a delay on any of themr when I was running 6.4R1. It was immediately after upgrading when I tested roles on each device. I use AD for AAA (before and after upgrade).

I did notice when I logged into a role using a workstation that is running IE 8, that it was blocking an add-on and then requested permission to run a Java applet (like previous post had said), but this wasn't the case pre upgrade.

Thanks for the input.

---

That is correct; there was a change made in 6.5 for when the JuniperSetupClient was pushed out to users; the 30-second delay was done to allow users time to see the ActiveX prompt and accept it and if they did not then push out the Java applet.