Hi Guys,

Environment details:
Access Manager 3.1.4-27.

Recently our users faced very long delays while accessing to the sites,
the issue got resolved automatically after some time.
But, when the issue was happening we were able to pull out the following
information from the logs.
It seems that there is a very huge delay between, Executing contract
Secure Name/Password Form and Attempting to authenticate user. There
were a few users who have faced delays of more than 1 minute.
Log snippet:
<amLogEntry> 2014-01-10T21:21:00Z INFO NIDS Application: AM#500105016:
AMDEVICEID#5307E2E01C1869EE: AMAUTHID#65E12E1249F8D24C25CC5B020873FF61:
Processing login resulting from Service Provider authentication request.
</amLogEntry>
<amLogEntry> 2014-01-10T21:21:00Z INFO NIDS Application: AM#500105009:
AMDEVICEID#5307E2E01C1869EE: AMAUTHID#65E12E1249F8D24C25CC5B020873FF61:
Executing contract Secure Name/Password - Form. </amLogEntry>
<amLogEntry> 2014-01-10T21:21:00Z INFO NIDS Application: AM#500105016:
AMDEVICEID#5307E2E01C1869EE: AMAUTHID#65E12E1249F8D24C25CC5B020873FF61:
Processing login resulting from Service Provider authentication request.
</amLogEntry>
<amLogEntry> 2014-01-10T21:21:00Z INFO NIDS Application: AM#500105009:
AMDEVICEID#5307E2E01C1869EE: AMAUTHID#65E12E1249F8D24C25CC5B020873FF61:
Executing contract Secure Name/Password - Form. </amLogEntry>
<amLogEntry> 2014-01-10T21:21:04Z INFO NIDS Application: AM#500105016:
AMDEVICEID#5307E2E01C1869EE: AMAUTHID#65E12E1249F8D24C25CC5B020873FF61:
Processing login resulting from Service Provider authentication request.
</amLogEntry>
<amLogEntry> 2014-01-10T21:21:04Z INFO NIDS Application: AM#500105009:
AMDEVICEID#5307E2E01C1869EE: AMAUTHID#65E12E1249F8D24C25CC5B020873FF61:
Executing contract Secure Name/Password - Form. </amLogEntry>
<amLogEntry> 2014-01-10T21:21:07Z INFO NIDS Application: AM#500105014:
AMDEVICEID#5307E2E01C1869EE: AMAUTHID#DACCF840B107AD26E674F22673B0AA56:
Attempting to authenticate user CN=Steve
Richardson,CN=Users,dc=ext-perseco,dc=com with provided credentials.
</amLogEntry>
<amLogEntry> 2014-01-10T21:21:08Z WARNING NIDS Application: Event Id:
3014666, Target: CN=Steve Richardson,CN=Users,dc=ext-perseco,dc=com,
Sub-Target: DACCF840B107AD26E674F22673B0AA56, Note 1: Local, Note 2:
Secure Name/Password - Form, Note 3: secure/name/password/uri, Numeric
1: 0, Data: 65.198.132.126 </amLogEntry>
<amLogEntry> 2014-01-10T21:21:08Z WARNING NIDS Application: Event Id:
3015456, Note 1: DACCF840B107AD26E674F22673B0AA56, Note 2: OBIEE, Note
3:
Document=(ou=xpemlPEP,ou=mastercdn,ou=ContentPubli sherContainer,ou=Partition,ou=PartitionsContainer, ou=VCDN_Root,ou=accessManagerContainer,o=novell:ro maContentCollectionXMLDoc),Policy=(PROD_OBIEE_Role s),Rule=(1::RuleID_1340759367412),Action=(AddRole: :ActionID_1340759633086),
Numeric 1: 0 </amLogEntry>
<amLogEntry> 2014-01-10T21:21:08Z WARNING NIDS Application: Event Id:
3015456, Note 1: DACCF840B107AD26E674F22673B0AA56, Note 2:
authenticated, Note 3: system-generated-action, Numeric 1: 0
</amLogEntry>
<amLogEntry> 2014-01-10T21:21:08Z INFO NIDS Application: AM#500105013:
AMDEVICEID#5307E2E01C1869EE: AMAUTHID#DACCF840B107AD26E674F22673B0AA56:
Authenticated user CN=Steve Richardson,CN=Users,dc=ext-perseco,dc=com in
User Store Havi-ExternalAD with roles "OBIEE","authenticated".
</amLogEntry>
<amLogEntry> 2014-01-10T21:21:08Z INFO NIDS Application: AM#500105016:
AMDEVICEID#5307E2E01C1869EE: AMAUTHID#DACCF840B107AD26E674F22673B0AA56:
Processing login resulting from Service Provider authentication request.
</amLogEntry>
<amLogEntry> 2014-01-10T21:21:08Z INFO NIDS IDFF: AM#500106004:
AMDEVICEID#5307E2E01C1869EE: Created new identity for
f3d02579d1b8f340a8f3b9e019dec54b with identity id of
https://esp.havigs.com:443/nesp/idff/metadata </amLogEntry>
<amLogEntry> 2014-01-10T21:21:08Z WARNING NIDS Application: Event Id:
3014665, Target: CN=Steve Richardson,CN=Users,dc=ext-perseco,dc=com,
Sub-Target: DACCF840B107AD26E674F22673B0AA56, Note 1:
https://login.havigs.com/nidp/idff/metadata, Note 2:
https://esp.havigs.com:443/nesp/idff/metadata, Note 3:
secure/name/password/uri, Numeric 1: 0, Data: 65.198.132.126
</amLogEntry>
<amLogEntry> 2014-01-10T21:21:08Z INFO NIDS Application: AM#500105018:
AMDEVICEID#5307E2E01C1869EE: AMAUTHID#DACCF840B107AD26E674F22673B0AA56:
Responding to AuthnRequest with artifact
AANNI2wsx0YgOM+DjCJHo/Xrd6cHzZwdDhISf5G6d/jh9HeRxgkM3waz </amLogEntry>
<amLogEntry> 2014-01-10T21:21:08Z INFO NIDS Application: AM#500105019:
AMDEVICEID#5307E2E01C1869EE: AMAUTHID#E6648108679199A6FE775AA1C1DCD4F9:
Sending AuthnResponse in response to artifact
AANNI2wsx0YgOM+DjCJHo/Xrd6cHzZwdDhISf5G6d/jh9HeRxgkM3waz </amLogEntry>
<amLogEntry> 2014-01-10T21:21:08Z INFO NIDS WSP: AM#500102001:
AMDEVICEID#5307E2E01C1869EE: AMAUTHID#DACCF840B107AD26E674F22673B0AA56:
The data describing the user authentication was found. </amLogEntry>
<amLogEntry> 2014-01-10T21:21:08Z INFO NIDS WSP: AM#500102006:
AMDEVICEID#5307E2E01C1869EE: AMAUTHID#DACCF840B107AD26E674F22673B0AA56:
Read data from attributes obtained when a remote authentication source
pushed the attributes to the NIDP. </amLogEntry>
<amLogEntry> 2014-01-10T21:21:19Z INFO NIDS Application: AM#500105014:
AMDEVICEID#5307E2E01C1869EE: AMAUTHID#65E12E1249F8D24C25CC5B020873FF61:
Attempting to authenticate user CN=Aranas\,
Romel,OU=Users,OU=HAVIGS-NorthAmerica,dc=perseco,dc=com with provided
credentials. </amLogEntry>
<amLogEntry> 2014-01-10T21:21:19Z WARNING NIDS Application: Event Id:
3014666, Target: CN=Aranas\,
Romel,OU=Users,OU=HAVIGS-NorthAmerica,dc=perseco,dc=com, Sub-Target:
65E12E1249F8D24C25CC5B020873FF61, Note 1: Local, Note 2: Secure
Name/Password - Form, Note 3: secure/name/password/uri, Numeric 1: 0,
Data: 10.10.121.62 </amLogEntry>
<amLogEntry> 2014-01-10T21:21:19Z WARNING NIDS Application: Event Id:
3015456, Note 1: 65E12E1249F8D24C25CC5B020873FF61, Note 2: OBIEE, Note
3:
Document=(ou=xpemlPEP,ou=mastercdn,ou=ContentPubli sherContainer,ou=Partition,ou=PartitionsContainer, ou=VCDN_Root,ou=accessManagerContainer,o=novell:ro maContentCollectionXMLDoc),Policy=(PROD_OBIEE_Role s),Rule=(1::RuleID_1340759367412),Action=(AddRole: :ActionID_1340759633086),
Numeric 1: 0 </amLogEntry>
<amLogEntry> 2014-01-10T21:21:19Z INFO NIDS Application: AM#500105013:
AMDEVICEID#5307E2E01C1869EE: AMAUTHID#65E12E1249F8D24C25CC5B020873FF61:
Authenticated user CN=Aranas\,
Romel,OU=Users,OU=HAVIGS-NorthAmerica,dc=perseco,dc=com in User Store
Havi-InternalAD with roles "OBIEE","authenticated". </amLogEntry>
<amLogEntry> 2014-01-10T21:21:19Z INFO NIDS Application: AM#500105016:
AMDEVICEID#5307E2E01C1869EE: AMAUTHID#65E12E1249F8D24C25CC5B020873FF61:
Processing login resulting from Service Provider authentication request.
</amLogEntry>
<amLogEntry> 2014-01-10T21:21:19Z WARNING NIDS Application: Event Id:
3014665, Target: CN=Aranas\,
Romel,OU=Users,OU=HAVIGS-NorthAmerica,dc=perseco,dc=com, Sub-Target:
65E12E1249F8D24C25CC5B020873FF61, Note 1:
https://login.havigs.com/nidp/idff/metadata, Note 2:
https://esp.havigs.com:443/nesp/idff/metadata, Note 3:
secure/name/password/uri, Numeric 1: 0, Data: 10.10.121.62
</amLogEntry>
<amLogEntry> 2014-01-10T21:21:19Z INFO NIDS Application: AM#500105018:
AMDEVICEID#5307E2E01C1869EE: AMAUTHID#65E12E1249F8D24C25CC5B020873FF61:
Responding to AuthnRequest with artifact
AANNI2wsx0YgOM+DjCJHo/Xrd6cHzZwdDhIoyxrjoLqy9thFoADAAx3V </amLogEntry>
<amLogEntry> 2014-01-10T21:21:19Z INFO NIDS Application: AM#500105019:
AMDEVICEID#5307E2E01C1869EE: AMAUTHID#32213A3202D42DD16D0CB10EC16D56F9:
Sending AuthnResponse in response to artifact
AANNI2wsx0YgOM+DjCJHo/Xrd6cHzZwdDhIoyxrjoLqy9thFoADAAx3V </amLogEntry>
<amLogEntry> 2014-01-10T21:21:20Z INFO NIDS WSP: AM#500102006:
AMDEVICEID#5307E2E01C1869EE: AMAUTHID#65E12E1249F8D24C25CC5B020873FF61:
Read data from attributes obtained when a remote authentication source
pushed the attributes to the NIDP. </amLogEntry>

What could be causing this delay with the authentication of the user?
Are there any other log files that we might need to take a look into to
troubleshoot this issue further?
Let me know if there are any other log files you guys need..

Any pointers or suggestions much appreciated.

Regards,
Dinesh


--
ddgaikwad
------------------------------------------------------------------------
ddgaikwad's Profile: https://forums.netiq.com/member.php?userid=5917
View this thread: https://forums.netiq.com/showthread.php?t=49678