000032404 - RSA SecurID Authentication Agent for Microsoft Windows has a 30 second delay with every login

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000032404
Applies ToRSA Product Set: SecurID
RSA Product/Service Type:  Authentication Agent for Microsoft Windows
RSA Version/Condition: 7.2.1 [28], 7.2.1 [101]
IssueSlow login has been reported with the RSA SecurID Authentication Agent for Microsoft Windows in versions through 7.2.1 build 28, having about a 30 second delay, even when doing a test authentication from the RSA Control Center, even when testing with a fixed passcode and  a user in the internal database.
The delay can be seen in the agent's logs, between the message that the user is challenged and sending the authentication request, signified by "SD_Init succeeded", as in the log snippet below.  Note that in the last two lines there is a 40 second delay on the agent in sending the authentication request, when it should be within a fraction of a second.  The time stamps are highlighted in red.

016-01-19 13:34:05.719 3776.5672 [I] [sidChallenge::checkUserInGroup] A match was found
2016-01-19 13:34:05.719 3776.5672 [I] [sidChallenge::checkUserInGroup] User is direct member of the group
2016-01-19 13:34:05.719 3776.5672 [I] [LACAuthenticator::isChallenged] getChallengeType has determined that the user is challenged.
2016-01-19 13:34:05.719 3776.5672 [V] [CommonAuthenticator::getPasscodeString (char version)] Enter
2016-01-19 13:34:05.719 3776.5672 [I] [LACPolicies::getNormalizePasscodePolicy] There is no Normalize Passcode policy configured. NormalizePasscode is being used as the
programmatic default.
2016-01-19 13:34:05.719 3776.5672 [V] [CommonAuthenticator::initAceClient] Enter
2016-01-19 13:34:05.735 3776.5672 [I] [CommonAuthenticator::initAceClient] Network is active.
2016-01-19 13:34:05.750 3776.5672 [V] [CommonAuthenticator::GetAuthDataDir] AuthDataDir = C:\Program Files\Common Files\RSA Shared\Auth Data
2016-01-19 13:34:05.750 3776.5672 [V] [CommonAuthenticator::GetAuthDataDir] Return
2016-01-19 13:34:45.610 3776.5672 [V] [CommonAuthenticator::initAceClient] SD_Init succeeded.
CauseThe cause of this behavior is documented in AAWIN-2102 (Agent huge delays in authentication).
ResolutionThe slow login has been fixed in RSA SecurID Authentication Agent for Microsoft Windows 7.2.1 [37].
WorkaroundThere is no work around for this issue with build 28, other than being patient during the login process.  This issue is not related to file permissions or LDAP users.
NotesCE added a comment on 15 October 2013 to AAWIN-2102:  Fixed in build 37.