1

I was trying to track down why my site was so painfully slow in IE9 when I pulled out Fiddler and realised that every request is being sent 3 times (twice I get 401.2 and then a success). I verified this happens on all browsers, its just that Chrome's speed was masking this (or it could be that this has nothing to do with my sites performance issues in IE).

I've set up break points in my begin/end request handlers and the request comes in for say a css file. It is not authenticated and the response goes out with a 401.2, I doubled checked that I'm not setting the response status anywhere myself, so somewhere between begin_request and end_request the status is changing to 401.2

Note: I have the runAllManagedModulesForAllRequests=true so I can configure compression, however this setting does not affect this (from what I can see from Fiddler).

I am very ignorant on kerberos/active directory in general but I just cannot fathom that this is a normal handshaking protocol for every single request (perhaps for the first? but not all).

I have scoured the googles and nothing seems to help (adding/removing modules/authentication providers, etc). I mean my site works just fine, its only once you look under the hood that I see the treplicated requests. Note: This also happens when I deploy to production so its not a server specific issue.

Has anyone ever seen this? thanks in advance.

gatapia
  • 3,574
  • 4
  • 40
  • 48
  • 1
    To expand on the answer below: To resolve this go to IIS Mgr and open the 'Configuration Editor' at the server level. Go to section: system.webServer/security/authentication/windowsAuthentication. And ensure you change from the defaults (the defaults were being ignored in my case until they were changed). So what you want to end up with is: authPersistNonNTLM=True, authPersistSingleRequest=False. However if these are already set as the default change them. Apply and then change back. !!! Arghhh the pain – gatapia Jun 07 '13 at 00:33

1 Answers1

1

I think this is how NTLM authentication works. The process is discussed here. Note that you will want to set AuthPersistSingleRequest to false to cut down on the number of 401s

Daniel
  • 452
  • 3
  • 12
  • I added a comment above (to my question) as to how I managed to resolve this. Thanks Daniel for setting me on the right path. – gatapia Jun 07 '13 at 00:34