Re: LDAP/AD Problems Related to WAN?

Tech-Archive recommends: Speed Up your PC by fixing your registry

Yeah, that's quite low. Not an issue in itself, but you need to enable ICMP
so that PMTU discovery can occur. If you don't do this, you need to change
the MTU, preferably on your network VPN device, which is using the smaller
value.

This is probably your issue. I've seen the same issue as you're having
across a VPN with a larger MTU than that. Basically, you're losing UDP
packets, which is playing hell with Kerberos and any other apps that use UDP
by default, e.g. DNS.

One way around the immediate issue (policy failure and slow logon, etc.) is
to force Kerberos to use TCP. However that's more of a bandage than a fix,
as other apps might still be having problems.

Replication and things will be fine as they use TCP, which is a
connection-oriented protocol, and is able to handle lost packets better.

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net



.

Relevant Pages

  • Re: cpu usage to 100% Why
    ... online speed is fine, until I open a few more apps, then everything crawls. ... Adjust the TCP Receive Window value upward (may be blank or contain some ... I did make one change; I went from dialup ...
    (microsoft.public.windowsxp.general)
  • Re: server 2003 [error_netname_deleted]
    ... to force Kerberos to use TCP (and therefore be able to fragment and traverse ...
    (microsoft.public.windows.server.active_directory)
  • [SLE] Letting X listen for TCP connections
    ... I'm running SuSE 9.1 and I'd like to have the ability to run remote X ... getting the option "-nolisten tcp" set. ... Before I go through my entire filesystem changing all instances of ... where it is I can disable this option so that I may run remote X apps. ...
    (SuSE)
  • Re: Network buffering
    ... >> built in retransmit mechanism. ... >> on top of TCP and not use TCP to handle lost packets. ... > We're using RTSPT. ...
    (microsoft.public.windowsmedia.server)
  • Re: UPD better than TCP in streaming video/audio ?
    ... Not always, but usually can, because of that apps using Real-Time Protocol ... > can UDP achieve better performance then TCP? ...
    (microsoft.public.win32.programmer.networks)