[cvsnt] Slow authentication with cvsnt and sspi

[Krogsgaard, Lotte]

Hello,

I am running 

Concurrent Versions System (CVSNT) 2.0.58d (client/server)

on a W2K server in a rather large domain. I have no administrative rights
over the domain name server. I am using SSPI with TortoiseCVS (1.8.11).
I have entered domain CVS users in a local group (called CVSUsers) on the
CVS server and set directory settings for the repository, so members of the
group have access. Everything seems to be working correctly - though
authentication is VERY slow.

Domain users are supposedly being authenticated through the CVS group + the
appropriate directory settings, however, it has become increasingly slow -
not sure whether this may have been caused by an update of the CVS product
or some other event. I have traced the time to be spent after 'checking
local access token for groups' and I am wondering exactly what is happening
during 'add_valid_group'. Actually authentication can be performed
successfully through  the CVSUsers group, which the (domain) user is a
member of.  As can be seen from the below trace 'Domain Users' are being
added multiple times, and this takes a lot of time. Does anyone have any
ideas as to what can be done to improve performance?

S -> Checking local access token for groups
S -> add_valid_group(Domain Users)
S -> add_valid_group(Everyone)
S -> add_valid_group(CLCAUsers)
S -> add_valid_group(CVSUsers)
S -> add_valid_group(DLCUsers)
S -> add_valid_group(Administrators)
S -> add_valid_group(Users)
S -> add_valid_group(NETWORK)
S -> add_valid_group(Authenticated Users)
S -> add_valid_group(WCSD ALL WCSD)
S -> add_valid_group(REPOS25DP WCSD)
S -> add_valid_group(MSS WCSD)
S -> add_valid_group(NSM HA WCSD RX )
S -> add_valid_group(SWAN WCSD GB)
S -> add_valid_group(DKSE Users)
S -> add_valid_group(CCC SERVICE IMPL)
S -> add_valid_group(TD TD ALL)
S -> add_valid_group(TD TD ALL RX)
S -> add_valid_group(DK Country Users)
S -> add_valid_group(Domain Users)
S -> add_valid_group(Domain Users)

 
Best regards,
Lotte