Acegi + CAS - Login - Load Test

[behrooz]

Hi everybody,

This is an experience we just encountered recently and we like to share it with you and also ask for some advice or solution for the bottleneck.

We have developed a web application through the mixture of CAS and Acegi to act as the single point of authentication and authorization for a number of enterprise applications in an organization.

Everything works fine except the fact that for a special case something happens that may need some more attention. If a number of about 100 users try to login approximately at the same time, the login time will drastically rise up to some extent that some of them will wait for minutes to get logged in.
To be more descriptive, if all the users start to login with a gap of about 1 second, still everything would be fine, but the coincidence will ruin everything up. We use Tomcat and MySQL.

When we browsed through the logs of Tomcat, it seems that for some of the users the CAS or Acegi will be trapped in a loop all with a AuthenticationSuccessEvent; meaning that the authentication has been done fine but no progress to the first page.

One thing we placed our doubt was the setting of the Cookie's in the browser, but it didn't seem to be the point.

I would be happy if you could just share your experience if you have encountered something similar.

By the way, anybody would happen to know an email from Ben Alex; I would like to contact him personally, but I haven't found his contact mail.

Thanks for your contribution,
Behrooz Nobakht

[behrooz]

Hi,

I did not know that this would be too simple or too difficult to post something on.

Thanks,
Behrooz

Hi everybody,

This is an experience we just encountered recently and we like to share it with you and also ask for some advice or solution for the bottleneck.

We have developed a web application through the mixture of CAS and Acegi to act as the single point of authentication and authorization for a number of enterprise applications in an organization.

Everything works fine except the fact that for a special case something happens that may need some more attention. If a number of about 100 users try to login approximately at the same time, the login time will drastically rise up to some extent that some of them will wait for minutes to get logged in.
To be more descriptive, if all the users start to login with a gap of about 1 second, still everything would be fine, but the coincidence will ruin everything up. We use Tomcat and MySQL.

When we browsed through the logs of Tomcat, it seems that for some of the users the CAS or Acegi will be trapped in a loop all with a AuthenticationSuccessEvent; meaning that the authentication has been done fine but no progress to the first page.

One thing we placed our doubt was the setting of the Cookie's in the browser, but it didn't seem to be the point.

I would be happy if you could just share your experience if you have encountered something similar.

By the way, anybody would happen to know an email from Ben Alex; I would like to contact him personally, but I haven't found his contact mail.

Thanks for your contribution,
Behrooz Nobakht

[Scott Battaglia]

You do realize that you posted this to both the Acegi forum and the CAS user list, where I responded to you already. I'm not about to respond to two places.

Have you done any analysis on your end, looking at CPU utilization, memory, and threads for your servers under this heavy load?

[behrooz]

Hi Scott,

Thanks Scott; I have received your previous reply and we have done some job on the Resource Utilization subject. But it seems that it is not the case; do you think that if I post the configs, would it help to figure what is going on?

I would appreciate any help.

And one other thing, I think I can ask Scott, is that how can I contribute to Acegi? if any clue, i would be happy.

And the last but not the least, you did not seem to get angry so soon.

Thanks,
Behrooz