Slow response on AAA Authorization

Hi,
We were configuring the AAA to use one of the TACACS server for authentication,authorization and accounting purpose. When we did the same, the command executed response become slow and even some times gives a message authorization failed. We thought, there should be useful information on the TACACS server to debug the same, but we were not able to find any message like that. The below is the config added and when we remove the configuration of AAA the login response and the command execution are good. We checked the path to reach from this router to TACACS server and seems good with no packet loss. Your asssistance would be really appreciated.
aaa new-model
aaa authentication login default group tacacs+ local
aaa authentication enable default group tacacs+ enable
aaa authorization config-commands
aaa authorization exec default group tacacs+ local
aaa authorization commands 0 default group tacacs+ local
aaa authorization commands 1 default group tacacs+ local
aaa authorization commands 15 default group tacacs+ local
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 0 default start-stop group tacacs+
aaa accounting commands 1 default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
aaa accounting connection default start-stop group tacacs+
aaa accounting system default start-stop group tacacs+
aaa session-id common
tacacs-server host <ip address> timeout 5
tacacs-server directed-request
tacacs-server key <key>
Regards
Anantha Subramanian Natarajan

Hi JG,
Thanks for the reply.
Actually, I am not sure whether on our TACACS server,the single connect TACACS+ is enabled or not but I am just curious as the other router having same platform with same configuration details connecting to the same TACACS server is working fine.
The error message appears frequently and atleast not specific to some command. Infact every other time, it gives the error.
Our TACACS and SNMP engineer is suggesting to chenage the IOS as it seems have some identified bug related to the SNMP and hopefully we are planning to do the same.
Meantime , if you can know something more precise or any suggestions would be hugely appreciated.
Thanks
Regards
Anantha Subramanian Natarajan

Similar Messages

Slow response of Authorization using ACS4.2

We had encountered a slow respone of command authorization with Cisco 3750 using TACACS+ protocol communicate with Cisco ACS 4.2. When we copy and paste more than 20 command lines, it is required more than 15s to complete and sometimes with "authorization failed". It seems that single connection can help, but the TACACS connection is keep connected in between ACS and switch. Not sure any performance impact to the Cisco ACS 4.2 and the maximum session to handle.
Any advice???
laut

Anyone can share the experience of Authorization with Cisco 3750 & ACS4.2?
Thanks.
laut

Command execution get very slow when AAA Authorization enable on ASR 1006

Without Authorization , I am able work smoothly with just click on ASR ...., But Once I enable Authorization it takes many secs to move to other command exampe ( If i hit config t or int gi1/0/1 , it take time to move to next command level) ...
These Authorization issue I am facing only on ASR and for Other Cisco Switches and Router its working fine wiith just a click.
Did any one face such issue , and how it is fix ...
See the Show version for ASR
Cisco IOS Software, IOS-XE Software (PPC_LINUX_IOSD-ADVIPSERVICESK9-M), Version 15.1(2)S, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Thu 24-Mar-11 23:32 by mcpre
Cisco IOS-XE software, Copyright (c) 2005-2011 by cisco Systems, Inc.
All rights reserved. Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0. The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY. You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0. For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.
ROM: IOS-XE ROMMON
NOITDCRTRCORP01 uptime is 10 weeks, 6 days, 1 hour, 16 minutes
Uptime for this control processor is 10 weeks, 6 days, 1 hour, 19 minutes
System returned to ROM by reload
System restarted at 17:47:32 IST Thu Oct 4 2012
System image file is "bootflash:/asr1000rp1-advipservicesk9.03.03.00.S.151-2.S.bin"
Last reload reason: EHSA standby down
AAA Commands on ASR 1006
aaa new-model
aaa group server tacacs+ tacgroup
server 10.48.128.10
server 10.72.160.10
ip vrf forwarding Mgmt-intf
ip tacacs source-interface GigabitEthernet0
aaa authentication login default group tacgroup local
aaa authentication enable default group tacgroup enable
aaa accounting exec default start-stop group tacgroup
aaa accounting commands 1 default start-stop group tacgroup
aaa accounting commands 15 default start-stop group tacgroup
aaa accounting connection default start-stop group tacgroup
aaa accounting system default start-stop group tacgroup
aaa authorization commands 0 default group tacgroup none
aaa authorization commands 1 default group tacgroup none
aaa authorization commands 15 default group tacgroup none
aaa session-id common
tacacs-server host 10.48.128.10 key 7 13351601181B0B382F04796166
tacacs-server key 7 053B071C325B411B1D25464058

I think your issue maybe related to your tacacs server. If you re-order the two servers (typically a 5 second timer before failover occurs) and see if that improves your performance:
You can try to debug the issue by referring to the command reference guide....i.e. debug tacacs...you can also try to telnet to both ip address to port 49 to see if the connection opens, in order to rule out issues where a firewall or routing to one of the tacacs servers is failing. I also noticed you have the shared secret and tacacs server defined for one of the servers, is the sam present for the other server that is in the server group?
server 10.48.128.10
server 10.72.160.10
to
server 10.72.160.10
server 10.48.128.10
Thanks,
Tarik Admani
*Please rate helpful posts*

AAA Authorization named authorization list

Ladies and Gents,
Your help will be greatly appreciated – I am currently studying CCNP Switch AAA configuration and I work with a tacacs+ server at work butI having difficulty getting my head around the below
Cisco.com extract below
When you create a named method list, you are defining a particular list of authorization methods for the indicated authorization type.
Once defined, method lists must be applied to specific lines or interfaces before any of the defined methods will be performed. The only exception is the default method list (which is named "default"). If the aaa authorization command for a particular authorization type is issued without a named method list specified, the default method list is automatically applied to all interfaces or lines except those that have a named method list explicitly defined. (A defined method list overrides the default method list.) If no default method list is defined, local authorization takes place by default.
My question is how do you define the Named Method List i.e. the none-default method list?
I don't mean the cisco switch config but how the list is created, is this on the tacacs+ server and the referred to in the CLI?
Any help would be much appreciated as I have read over tons of documents and I can’t see how this is created
Thanks in advance
David

Hi David,
An example of a named AAA list might look something like this:
aaa authorization exec TacExec group AAASrv local
In the example above, I've created a AAA authorization list for controlling shell exec sessions called "TacExec", which will check the remote AAA servers in the group "AAASrv" first; if the device receives no response from the remote servers, it will then atempt to validate the credentials via the local user database. Please remember that a deny response from the AAA server is not the same as no reposonse, the device will only check the local user database if an only if it recieves nothing back from the TACACS query.
Of course, before you create this method list, you need to define the TACACS servers via the "tacacs-server" command, and then add those servers to the group via the "aaa group server" command.
Below is a cut and paste from the AAA section on one of my devices:
aaa new-model
ip tacacs source-interface
tacacs-server host 10.x.x.x key 7
tacacs-server host 10.x.x.y key 7
aaa group server tacacs+ TacSrvGrp
server 10.x.x.x
server 10.x.x.y
aaa authentication login default local
aaa authentication login TacLogin group TacSrvGrp local
aaa authorization console
aaa authorization config-commands
aaa authorization exec default local
aaa authorization exec TacAuth group TacSrvGrp local
aaa authorization commands 0 default local
aaa authorization commands 0 TacCommands0 group TacSrvGrp local
aaa authorization commands 1 default local
aaa authorization commands 1 TacCommands1 group TacSrvGrp local
aaa authorization commands 15 default local
aaa authorization commands 15 TacCommands15 group TacSrvGrp local
aaa accounting exec default start-stop group TacSrvGrp
aaa accounting commands 15 default start-stop group TacSrvGrp
aaa session-id common
Notice that for the various authentication and authorization parameters, there is a named method list as well as a default method list. As per Cisco's documentation, a aaa method list called default (that you explicitly define) will apply to all input methods (con, aux, vty, etc) unless you set a named method list on the particular input line (see below):
line con 0
exec-timeout 5 0
line aux 0
exec-timeout 5 0
line vty 0 4
exec-timeout 15 0
authorization commands 0 TacCommands0
authorization commands 1 TacCommands1
authorization commands 15 TacCommands15
authorization exec TacAuth
login authentication TacLogin
transport input ssh
For the console and aux inputs, I only ever want to use local credentials for AAA purposes (ie: If I have to connect on an out-of-band interface, something is potentially wrong with the network connectivity), however for the VTY lines (SSH sessions in this instance), I always want to use the TACACS servers first, with local user credentials as a fallback mechanism.
One thing you need to be VERY mindful of when configuring your devices for AAA is the order of the commands that are entered. It is a relatively simple matter to lock yourself out from the device management if you don't pay close attention to the specific order that the commands are entered. Typically, I will first do a "show user" just to find out which VTY line that I'm connected on, and when I assign the named AAA method lists to the VTY lines, I normally leave the line that I'm on at the default (local), then I open a second session to the device, authenticate using my TACACS credentials, and complete the config on the remaining VTY line.
Keep in mind that there are some other parameters that you can define at the tacacs-server level (timeout value is a good one to look at) which you can use to enhance the AAA performance somewhat.
Hope this helps!

AAA authorization commands

Hi All
Probably i am going to ask a stupid question but i am really confused regarding the purpose of "aaa authorization commands x default local" command. I understand that if this command is configured, it authorizes each and every command of that level but in my experience, this command is not doing anything. The outcome is same whether it is configured or not.
Following is my aaa part config
username cisco privilege 15 secret cisco
aaa new-model
aaa authentication login default local enable
aaa authorization exec default local if-authenticated
aaa authorization commands 15 default local if-authenticated
Now whether i keep the last command or remove it, username "cisco" is able to use every level 15 command so my question is, why i bother configuring this command?
Would really appreciate your quick reply
Regards

Thanx a lot for your quick response. Really appreciate that.
So does this mean, can i safely assume that if i am using local database then i don't require "aaa authorization command level" command??
that is following should be the config
username cisco privilege 15 secret cisco
aaa new-model
aaa authentication login default local enable
aaa authorization exec default local if-authenticated
privilege exec level 15 show (just an example)
privilege exec level 15 debug
I have tested this and it worked fine without using "aaa authorization command level"
Moreover, regarding the use of AAA server, my eventual plan is to use TACACS+ but before that, i wanted to get a good grip of AAA functionality and therefore started off with local user database.
So u mean to say, if i am using TACACS+ for authentication and authorization purposes and in ACS Server, user "cisco" has been assigned level 15 but with authorization set of "show" and "debug" only then by using "aaa authorization commands level" in a router, i can successfully restrict user "cisco" to "debug" and "show" only? In my point of view, i can achieve this anyway (restricting "cisco" user to only use "show and debug) without using "aaa authorization command level" (like i tested with local database)??
will really appreciate your kind response

Allow some show commands in AAA Authorization Set

I'm working on creating AAA authorization sets for our environment and ran into a question!
I'd like to be able to enable ALL show commands except 'show run'. I would also like to enable 'show run interface'. I've figured out how to enable all show commands and disable show run. The problem I'm finding is that since 'show run interface' is a subset of 'show run' it seems to disable. Even if I try to explicitly enable it.
Is there a way to disable 'show run' but enable all other show commands and 'show run interface' with a AAA authorization set?
ACS Version 4.1.
Command set is configured:

Changing it to 'deny running-config' does the exact same thing. It looks like it's seeing the 'show running-config' then stoping on that before anything else. I've tried adding 'permit run interface' in ACS and same thing. Other AAA Authorization set commands work just fine.
On the switch (its a 2960G-8TC-K) running 12.2(58)SE2.
aaa group server tacacs+ SHS
server 10.10.11.200
aaa authentication login verifyme group TACACS+ local
aaa authorization config-commands
aaa authorization exec verifyme group TACACS+ local
aaa authorization commands 0 default group TACACS+
aaa authorization commands 1 default group TACACS+
aaa authorization commands 15 default group TACACS+
aaa accounting send stop-record authentication failure
aaa accounting exec verifyme start-stop group TACACS+
aaa accounting commands 15 default start-stop group TACACS+
aaa accounting network verifyme start-stop group TACACS+
aaa accounting system default start-stop group TACACS+
aaa session-id common
Debugs!
Jun 21 11:07:39: AAA: parse name=tty0 idb type=-1 tty=-1
Jun 21 11:07:39: AAA: name=tty0 flags=0x11 type=4 shelf=0 slot=0 adapter=0 port=0 channel=0
Jun 21 11:07:39: AAA/MEMORY: create_user (0x3A790DC) user='test' ruser='SGAVEJ01' ds0=0 port='tty0' rem_addr='async' authen_type=ASCII service=NONE priv=15 initial_task_id='0', vrf= (id=0)
Jun 21 11:07:39: tty0 AAA/AUTHOR/CMD (4105592267): Port='tty0' list='' service=CMD
Jun 21 11:07:39: AAA/AUTHOR/CMD: tty0 (4105592267) user='test'
Jun 21 11:07:39: tty0 AAA/AUTHOR/CMD (4105592267): send AV service=shell
Jun 21 11:07:39: tty0 AAA/AUTHOR/CMD (4105592267): send AV cmd=show
Jun 21 11:07:39: tty0 AAA/AUTHOR/CMD (4105592267): send AV cmd-arg=running-config
Jun 21 11:07:39: tty0 AAA/AUTHOR/CMD (4105592267): send AV cmd-arg=interface
Jun 21 11:07:39: tty0 AAA/AUTHOR/CMD (4105592267): send AV cmd-arg=GigabitEthernet
Jun 21 11:07:39: tty0 AAA/AUTHOR/CMD (4105592267): send AV cmd-arg=0/1
Jun 21 11:07:39: tty0 AAA/AUTHOR/CMD (4105592267): send AV cmd-arg=
Jun 21 11:07:39: tty0 AAA/AUTHOR/CMD(4105592267): found list "default"
Jun 21 11:07:39: tty0 AAA/AUTHOR/CMD (4105592267): Method=TACACS+ (tacacs+)
Jun 21 11:07:39: AAA/AUTHOR/TAC+: (4105592267): user=test
Jun 21 11:07:39: AAA/AUTHOR/TAC+: (4105592267): send AV service=shell
Jun 21 11:07:39: AAA/AUTHOR/TAC+: (4105592267): send AV cmd=show
Jun 21 11:07:39: AAA/AUTHOR/TAC+: (4105592267): send AV cmd-arg=running-config
Jun 21 11:07:39: AAA/AUTHOR/TAC+: (4105592267): send AV cmd-arg=interface
Jun 21 11:07:39: AAA/AUTHOR/TAC+: (4105592267): send AV cmd-arg=GigabitEthernet
Jun 21 11:07:39: AAA/AUTHOR/TAC+: (4105592267): send AV cmd-arg=0/1
Jun 21 11:07:39: AAA/AUTHOR/TAC+: (4105592267): send AV cmd-arg=
Jun 21 11:07:39: TAC+: Using default tacacs server-group "TACACS+" list.
Jun 21 11:07:39: TAC+: Opening TCP/IP to 10.10.11.200/49 timeout=5
Jun 21 11:07:39: TAC+: Opened TCP/IP handle 0x3A41210 to 10.10.11.200/49 using source 10.40.0.14
Jun 21 11:07:39: TAC+: 10.10.11.200 (4105592267) AUTHOR/START queued
Jun 21 11:07:39: TAC+: (4105592267) AUTHOR/START processed
Jun 21 11:07:39: TAC+: (-189375029): received author response status = FAIL
Jun 21 11:07:39: TAC+: Closing TCP/IP 0x3A41210 connection to 10.10.11.200/49
Jun 21 11:07:39: AAA/AUTHOR (4105592267): Post authorization status = FAIL
Jun 21 11:07:39: AAA/MEMORY: free_user (0x3A790DC) user='test' ruser='SGAVEJ01' port='tty0' rem_addr='async' authen_type=ASCII service=NONE priv=15 vrf= (id=0)

Aaa authorization bypass

Is their a command that will bypass the aaa authorization from a particular host? I would like to use something like the aaa mac-exempt command, but have it only exempt on the authorization part. Background: i have a firewall management station that pushes out policies (configs) with over 2000 commands, and if i was to do this to say 500 firewalls... i could have 1000's of authorization statements to authorize. I would like to do the proper aaa authentication against this mgmt server, but have the nas ignore the authorization part.

I would agree, would be nice to have aaa statement to ignore aaa authorization from a specific mac/ip/or something like that, but not to ignore the aaa authentication. I have some firewall configurations with over 3000 lines, so when I do a firewall config change my policy server has to re-write all those lines of code... and that means 3000 aaa authorization requests/responses. Here are configs... We use unix version of tacacs+. Thank you for any assistance.
============================================
(PIX 7.x configuration)
aaa-server TACACS+ protocol tacacs+
aaa-server TACACS+ (outside) host x.x.x.x
key xxxxx
server-port xxxx
aaa authentication ssh console TACACS+ LOCAL
aaa authentication serial console TACACS+ LOCAL
aaa authentication enable console TACACS+ LOCAL
aaa authorization command TACACS+ LOCAL
========================================
(TACACS+ configuration)
group = FULLPRIV {
default service = permit
service = shell {
cmd=enable {
permit .*
enable = ldap

Parameter based on decode/function field - slow response

Hi,
When one of the parameters of a report is used, the report takes a very long time to run. The parameter has a LOV of statuses in Hebrew.
The folder is a custom folder and the status in Hebrew is a decode field using a function. In other words, it first goes to a function to get the status, and then translates each status (I guess that the Hebrew will be strange but I hope that the general form of the decode is clear):
DECODE( APPS.JAFI_DISCO_UTILS_PKG.JAFI_GET_INVOICE_STATUS(
AI.INVOICE_ID,
AI.INVOICE_AMOUNT,
AI.PAYMENT_STATUS_FLAG,
AI.INVOICE_TYPE_LOOKUP_CODE),
'APPROVED','מאומת',
'NEVER APPROVED','מעולם לא עבר אימות',
'NEEDS REAPPROVAL','דורש אימות מחדש',
'CANCELLED','מבוטל',
'AVAILABLE','זמין',
'UNAPPROVED','לא מאומת',
'SELECTED FOR PAYMENT','נבחר לתשלום',
'FULL','מיוחס במלואו',
'UNPAID','לא שולם',' ')
I am assuming that the reason for the slow response is the constant run of the function in addition to the decode (which I was once told also slows the response a bit).
Is there anyway to change the sql somewhat? Without using the parameter the report takes about 2 1/2 minutes to run. Using the parameter it takes around 25 minutes to run.
Thank you.
Leah
Edited by: user476771 on May 10, 2010 2:09 AM

Hi Michael,
I think your suggestion #3, checking the indexes, is an excellent start.
As to the other suggestions, I believe that everything passed to the function is needed to find the status.
We seem to have serious problems running materialized views. Our dba is actually checking it out now. One group of mv were changed a few months ago so that they are no longer needed (someone worked around it using other tables for the data). Another mv is problematic even though it takes 14 minutes to create in a tst environment (which I happen to do yesterday) and causes no problems afterwards, it is a problem when run in prod as part of a job. As I mentioned, our dba is checking it out.
I hesitate to create a new table that is updated every night with the status of each invoice. It won't be up-to-date during the day, and it means changing the report that has otherwise run smoothly until now. The user avoids using the one parameter as much as possible so it's not THAT bad...
I really appreciate your giving the four suggestions.
Thank you so much.
Leah

Slow Response Sun ONE 6.1 SP3 Win 2003

My Sun ONE web server is processing my JSP pages very quickly when serving one session at a time. However when there are 4 or more active sessions, it slows right down. Response time goes from 2 seconds (1 active session) to 60 seconds (multiple active sessions) for a single JSP page. I've been running the performance monitor to see if I can notice anything, but nothing seems to stand out. I have tried manipulating the Keep Alive settings and the Performance settings within the Magnus Editor but there hasn't been a noticable improvement.
I've recently upgraded to SP4 to see if this solved my problem, but there was no imporvement.
This server is an HP DL380 with dual 2.8GHz Xeon processors & 2 Gigs of RAM. There is a lot of available disk space. I'm running Windows 2003 and it's up to date with all the latest patches.
Anyone have any ideas or experienced this before?
I've attached the output from my performance monitor:
webservd pid: 4280
Sun ONE Web Server 6.1SP4 B01/20/2005 21:34 (WINNT DOMESTIC)
Server started Thu Mar 03 09:41:06 2005
Process 4280 started Thu Mar 03 09:41:06 2005
ConnectionQueue:
Current/Peak/Limit Queue Length 0/1/4096
Total Connections Queued 126
Average Queue Length (1, 5, 15 minutes) 0.00, 0.00, 0.00
Average Queueing Delay 0.02 milliseconds
ListenSocket ls1:
Address http://10.178.132.7:8080
Acceptor Threads 8
Default Virtual Server https-guruweb01
KeepAliveInfo:
KeepAliveCount 2/64
KeepAliveHits 1083
KeepAliveFlushes 0
KeepAliveRefusals 0
KeepAliveTimeouts 11
KeepAliveTimeout 360 seconds
SessionCreationInfo:
Active Sessions 2
Keep-Alive Sessions 1
Total Sessions Created 48/256
CacheInfo:
enabled yes
CacheEntries 110/1024
Hit Ratio 1912/2164 ( 88.35%)
Maximum Age 30
Native pools:
NativePool:
Idle/Peak/Limit 5/6/128
Work Queue Length/Peak/Limit 0/1/0
Server DNS cache disabled
Async DNS disabled
Performance Counters:
Average Total Percent
Total number of requests: 1213
Request processing time: 1.5520 1882.5520
default-bucket (Default bucket)
Number of Requests: 1213 (100.00%)
Number of Invocations: 15085 (100.00%)
Latency: 0.0002 0.2013 ( 0.01%)
Function Processing Time: 1.5518 1882.3507 ( 99.99%)
Total Response Time: 1.5520 1882.5520 (100.00%)
Sessions:
Process Status Function
4280 keep-alive
response service-dump
response service-j2ee
Thanks...

The JSP's are simply Hello World JSP's (however I created these type of JSP's for testing and they do respond slowly as well when these are multiple sessions).
These JSP functioned fine on iPlanet 6.0 SP1 (JDK 1.2.2) without any slow response on Win2K and inferior hardware.

Slow response using internet, just hangs

Not the best at IT and just clicked update when it came up as available without realising what I was doing! Turns out it was an upgrade to os x 10.9.4. Since then the laptop has been practically unusable particularily when it comes to safari, it is either really slow getting to a particular page or just doesnt do anything, no matter how long you wait. Restarting doesnt seem to help, reload view fails as well. Its strange as sometimes its ok for 10 minutes then starts doing this. I know this is bad but I have never backed the laptop up so cant restore to previous version. I am currently looking into which external hard drive to buy so I can start doing regular back ups. I have run EtreCheck in the hope somebody can help!! Results below
Problem description:
Very slow responses on internet, just hangs for ages
EtreCheck version: 2.0.6 (91)
Report generated 25 October 2014 13:18:22 BST
Hardware Information: ℹ️
MacBook Pro (13-inch, Late 2011) (Verified)
MacBook Pro - model: MacBookPro8,1
1 2.4 GHz Intel Core i5 CPU: 2-core
4 GB RAM Upgradeable
BANK 0/DIMM0
2 GB DDR3 1333 MHz ok
BANK 1/DIMM0
2 GB DDR3 1333 MHz ok
Bluetooth: Old - Handoff/Airdrop2 not supported
Wireless: en1: 802.11 a/b/g/n
Video Information: ℹ️
Intel HD Graphics 3000 - VRAM: 384 MB
Color LCD 1280 x 800
System Software: ℹ️
OS X 10.9.4 (13E28) - Uptime: 0:42:39
Disk Information: ℹ️
ST9500325ASG disk0 : (500.11 GB)
S.M.A.R.T. Status: Verified
EFI (disk0s1) <not mounted> : 210 MB
Macintosh HD (disk0s2) / [Startup]: 499.25 GB (392.13 GB free)
Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB
MATSHITADVD-R   UJ-8A8
USB Information: ℹ️
Apple Inc. Apple Internal Keyboard / Trackpad
Apple Inc. BRCM2070 Hub
Apple Inc. Bluetooth USB Host Controller
Apple Inc. FaceTime HD Camera (Built-in)
Apple Computer, Inc. IR Receiver
Thunderbolt Information: ℹ️
Apple Inc. thunderbolt_bus
Gatekeeper: ℹ️
Mac App Store and identified developers
Kernel Extensions: ℹ️
/System/Library/Extensions
[loaded] com.rim.driver.BlackBerryUSBDriverInt (0.0.97) Support
[not loaded] com.rim.driver.BlackBerryUSBDriverVSP (0.0.97) Support
/Users/[redacted]/Downloads/PeerGuardian.app
[not loaded] xxx.qnation.PeerGuardian (1.1.11 - SDK 10.2) Support
Launch Daemons: ℹ️
[loaded] com.adobe.fpsaud.plist Support
[loaded] com.oracle.java.Helper-Tool.plist Support
[loaded] xxx.qnation.PeerGuardian.locum.plist Support
User Launch Agents: ℹ️
[running] com.amazon.cloud-player.plist Support
[loaded] com.google.keystone.agent.plist Support
User Login Items: ℹ️
iTunesHelper Application (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)
Android File Transfer Agent Application (/Users/[redacted]/Library/Application Support/Google/Android File Transfer/Android File Transfer Agent.app)
pploader Application (/Users/[redacted]/Downloads/PeerGuardian.app/Contents/Library/LoginItems/pploa der.app)
pplogger Application (/Users/[redacted]/Downloads/PeerGuardian.app/Contents/Library/LoginItems/pplog ger.app)
Internet Plug-ins: ℹ️
FlashPlayer-10.6: Version: 15.0.0.189 - SDK 10.6 Support
Default Browser: Version: 537 - SDK 10.9
Flash Player: Version: 15.0.0.189 - SDK 10.6 Cannot contact Adobe
LogMeIn: Version: 1.0.730 Support
QuickTime Plugin: Version: 7.7.3
LogMeInSafari32: Version: 1.0.730 Support
LogMeInSafari64: Version: 1.0.730 Support
JavaAppletPlugin: Version: Java 7 Update 67 Check version
Safari Extensions: ℹ️
AdBlock
3rd Party Preference Panes: ℹ️
Flash Player Support
Java Support
Time Machine: ℹ️
Time Machine not configured!
Top Processes by CPU: ℹ️
      6% WindowServer
      1% fontd
      0% AppleSpell
      0% Safari
      0% imagent
Top Processes by Memory: ℹ️
159 MB Safari
103 MB pploader
73 MB com.apple.WebKit.WebContent
47 MB WindowServer
34 MB mds_stores
Virtual Memory Information: ℹ️
1.53 GB Free RAM
1.14 GB Active RAM
655 MB Inactive RAM
971 MB Wired RAM
624 MB Page-ins
0 B Page-outs

Not the best at IT and just clicked update when it came up as available without realising what I was doing! Turns out it was an upgrade to os x 10.9.4. Since then the laptop has been practically unusable particularily when it comes to safari, it is either really slow getting to a particular page or just doesnt do anything, no matter how long you wait. Restarting doesnt seem to help, reload view fails as well. Its strange as sometimes its ok for 10 minutes then starts doing this. I know this is bad but I have never backed the laptop up so cant restore to previous version. I am currently looking into which external hard drive to buy so I can start doing regular back ups. I have run EtreCheck in the hope somebody can help!! Results below
Problem description:
Very slow responses on internet, just hangs for ages
EtreCheck version: 2.0.6 (91)
Report generated 25 October 2014 13:18:22 BST
Hardware Information: ℹ️
MacBook Pro (13-inch, Late 2011) (Verified)
MacBook Pro - model: MacBookPro8,1
1 2.4 GHz Intel Core i5 CPU: 2-core
4 GB RAM Upgradeable
BANK 0/DIMM0
2 GB DDR3 1333 MHz ok
BANK 1/DIMM0
2 GB DDR3 1333 MHz ok
Bluetooth: Old - Handoff/Airdrop2 not supported
Wireless: en1: 802.11 a/b/g/n
Video Information: ℹ️
Intel HD Graphics 3000 - VRAM: 384 MB
Color LCD 1280 x 800
System Software: ℹ️
OS X 10.9.4 (13E28) - Uptime: 0:42:39
Disk Information: ℹ️
ST9500325ASG disk0 : (500.11 GB)
S.M.A.R.T. Status: Verified
EFI (disk0s1) <not mounted> : 210 MB
Macintosh HD (disk0s2) / [Startup]: 499.25 GB (392.13 GB free)
Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB
MATSHITADVD-R   UJ-8A8
USB Information: ℹ️
Apple Inc. Apple Internal Keyboard / Trackpad
Apple Inc. BRCM2070 Hub
Apple Inc. Bluetooth USB Host Controller
Apple Inc. FaceTime HD Camera (Built-in)
Apple Computer, Inc. IR Receiver
Thunderbolt Information: ℹ️
Apple Inc. thunderbolt_bus
Gatekeeper: ℹ️
Mac App Store and identified developers
Kernel Extensions: ℹ️
/System/Library/Extensions
[loaded] com.rim.driver.BlackBerryUSBDriverInt (0.0.97) Support
[not loaded] com.rim.driver.BlackBerryUSBDriverVSP (0.0.97) Support
/Users/[redacted]/Downloads/PeerGuardian.app
[not loaded] xxx.qnation.PeerGuardian (1.1.11 - SDK 10.2) Support
Launch Daemons: ℹ️
[loaded] com.adobe.fpsaud.plist Support
[loaded] com.oracle.java.Helper-Tool.plist Support
[loaded] xxx.qnation.PeerGuardian.locum.plist Support
User Launch Agents: ℹ️
[running] com.amazon.cloud-player.plist Support
[loaded] com.google.keystone.agent.plist Support
User Login Items: ℹ️
iTunesHelper Application (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)
Android File Transfer Agent Application (/Users/[redacted]/Library/Application Support/Google/Android File Transfer/Android File Transfer Agent.app)
pploader Application (/Users/[redacted]/Downloads/PeerGuardian.app/Contents/Library/LoginItems/pploa der.app)
pplogger Application (/Users/[redacted]/Downloads/PeerGuardian.app/Contents/Library/LoginItems/pplog ger.app)
Internet Plug-ins: ℹ️
FlashPlayer-10.6: Version: 15.0.0.189 - SDK 10.6 Support
Default Browser: Version: 537 - SDK 10.9
Flash Player: Version: 15.0.0.189 - SDK 10.6 Cannot contact Adobe
LogMeIn: Version: 1.0.730 Support
QuickTime Plugin: Version: 7.7.3
LogMeInSafari32: Version: 1.0.730 Support
LogMeInSafari64: Version: 1.0.730 Support
JavaAppletPlugin: Version: Java 7 Update 67 Check version
Safari Extensions: ℹ️
AdBlock
3rd Party Preference Panes: ℹ️
Flash Player Support
Java Support
Time Machine: ℹ️
Time Machine not configured!
Top Processes by CPU: ℹ️
      6% WindowServer
      1% fontd
      0% AppleSpell
      0% Safari
      0% imagent
Top Processes by Memory: ℹ️
159 MB Safari
103 MB pploader
73 MB com.apple.WebKit.WebContent
47 MB WindowServer
34 MB mds_stores
Virtual Memory Information: ℹ️
1.53 GB Free RAM
1.14 GB Active RAM
655 MB Inactive RAM
971 MB Wired RAM
624 MB Page-ins
0 B Page-outs

Extremely Slow Response when attempting to display files on Windows Server

I have set up File Sharing on my MacBook Pro using SMB and defined the folders that are available to be shared. When I look at the Network Neighbourhood in Windows Explorer the Macbook appears listed with all the other PCs on the network. When I try to open the Macbook in Explorer it takes a very long time to open (about 2 minutes or so) and shows me the list of folders. When I try to open a folder the exact same thing happens - it opens after a couple of minutes, this continues for every folder that I try to open. I thought it might be that Explorer needed to "catalog" the files in the folders but the same thing happens each time - if I close the connection and try again it takes the same amount of time. What is very strange is that if I connect to the Windows Server from the Mac opening and looking at shared folders/files is instantaneous so clearly this is not a network problem. If I use the Win2K3 server to look at other computers/files the result is the same - instantaneous access, so it has nothing to do with the Win2K3 server - clearly the problem is with the MacBook serving up the file information to the Win2K3 server. I have tried with AFP on and off and the result is the same. The user name/pwd is the same on both the Win2K3 and the Macbook - and I have tried with a different username on the Win2K3 - no difference. Anyone have any ideas as to why this is happening?

Yes they are on the same workgroup, on ethernet, plugged into the same switch. The Mac can read and copy files of the Win2K3 server with no problem. The problem is clearly at the Mac end as the Win2K3 server can view files on any machine on the network without the slow response, the Mac can view files on the Win2K3 server without the slow response, it is only when the Win2K3 server tries to view files on the Mac.

Random users getting very slow response when opening messages/attachments or sending email

I have a small number of users, mostly very senior management of course, who are experiencing slow response when trying to open email messages and attachments or send messages.
They see the spinning wheel and sit there until it decides to open or send. If the message is opened and closed again you would expect it to be quick reopening the same message, no, it does the same thing again.
These users are all using Outlook 2010 and their mail accounts are on Exchange 2013. It does not seem to make a difference if they use a physical machine or log into a VDI.
I do not have the same issue generally, though I have experienced this when using VDI and this has been seen using a number of different machine pools so it is not a specific pool.
This is not specifically a VDI issue, as the 3rd paragraph says, the issues are seen on both physical and virtual machines.
none of the mailboxes are particularly large, most are at around 60% of quota limit, and the same limit applies to almost all mailboxes across the organization. They also do not appear to have a huge number of messages stored, other users without issues
have larger mailboxes and higher item counts. Any ideas what I need to look at to address this?

Hi,
How about OWA?
If OWA works well, it seems an issue on the Outlook client side.
Please try to run Outlook under safe mode and re-create profile for testing.
Any related error/warning/information message left in App Log?
Also consider the network Bandwidth.
Thanks
If you have feedback for TechNet Subscriber Support, contact
[email protected]
Mavis Huang
TechNet Community Support

Very slow response when I click on a link, but almost instant response if I go back and click a second time.

I often get very slow response when I click on a link, any link. But if I go back and click on the link again, then the page will open almost immediately. I discovered this by accident and noticed that this happens every time. It would be nice if I got fast response on the first click without having to do this silly procedure and it seems to me that there's a simple fix. I would appreciate it if you could help. I'm open to any and all ideas. Thanks again.
Sincerely,
Al
Version 26.0 Firefox, Windows XP, sp/3

Hello,
'''Try Firefox Safe Mode''' to see if the problem goes away. Safe Mode is a troubleshooting mode, which disables most add-ons.
''(If you're not using it, switch to the Default theme.)''
* On Windows you can open Firefox 4.0+ in Safe Mode by holding the '''Shift''' key when you open the Firefox desktop or Start menu shortcut.
* On Mac you can open Firefox 4.0+ in Safe Mode by holding the '''option''' key while starting Firefox.
* On Linux you can open Firefox 4.0+ in Safe Mode by quitting Firefox and then going to your Terminal and running: firefox -safe-mode (you may need to specify the Firefox installation path e.g. /usr/lib/firefox)
* Or open the Help menu and click on the '''Restart with Add-ons Disabled...''' menu item while Firefox is running.
[[Image:FirefoxSafeMode|width=520]]
''Once you get the pop-up, just select "'Start in Safe Mode"''
[[Image:Safe Mode Fx 15 - Win]]
'''''If the issue is not present in Firefox Safe Mode''''', your problem is probably caused by an extension, and you need to figure out which one. Please follow the [[Troubleshooting extensions and themes]] article for that.
''To exit the Firefox Safe Mode, just close Firefox and wait a few seconds before opening Firefox for normal use again.''
''When you figure out what's causing your issues, please let us know. It might help other users who have the same problem.''
Thank you.

Slow response when using Xcelsius web service connection witn input values

We've been very successful in using the Xcelsius Web Service Connection. We've recently moved forward toward using input values when calling a web service and having issues with response time. Without input values, it takes 3 - 6 seconds to retrieve and display the results in Xcelsius, but, when using the input values to the web service, it takes about 27 seconds for Xcelsius to retrieve and display the results. Does anyone have experience with fixing slow response associated with using input values for a web service connection?

Hi Sharone,
What's the version of your Xcelsius and BOBJ server?
I'm asking because using the last version of BOBJ server (BOXI 3.1 SP 3) you have new services on CMC just to help Xcelsius to work better with WebServices.
Regards,
Rodrigo.

Using collections and experiencing slow response

I am experiencing slow response when using htmldb_collection. I was hoping someone might point me in another direction or point to where the delay may be occurring.
First a synopsis of what I am using these collections for. The main collections are used in order to enable the users to work with multiple rows of data (each agreement may have multiple inbound and outbound tiered rates). These collections, OBTCOLLECTION and IBTCOLLECTION, seem to be fine. The problem arises from the next set of collections.
OBTCOLLECTION and IBTCOLLECTION each contain a field for city, product, dial code group and period. Each of these fields contains a semi-colon delimited string. When the user chooses to view either the outbound tiers (OBTCOLLECTION) or the inbound tiers (IBTCOLLECTION), I generate four collections based on these four fields, parsing the delimited strings, for each tier (record in the OBT or IBT collection). Those collections are used as the bases for multiple select shuttles when the user edits an individual tier.
Here is the collection code for what I am doing.
When the user chooses an agreement to work with, by clicking on an edit link, they are sent to page 17 (as you see referenced in the code). That page has the on-demand process below triggered on load, after footer.
-- This process Loads the collections used
-- for the Inbound and Outbound tier details
     -- OBTCOLLECTION
     -- IBTCOLLECTION
-- It is an on-demand process called on load (after footer) of page 17 --
-- OUTBOUND TIER COLLECTION --
     if htmldb_collection.collection_exists( 'OBTCOLLECTION') = TRUE then
         htmldb_collection.delete_collection(p_collection_name => 'OBTCOLLECTION' );
     end if;
     htmldb_collection.create_collection_from_query(
         p_collection_name => 'OBTCOLLECTION',
         p_query           => 'select ID, AGREEMENT_ID, FIXED_MOBILE_ALL,
                          OF_TYPE,TIER, START_MIN, END_MIN,
                                         REVERT_TO, RATE,CURRENCY,
                                         PENALTY_RATE, PENALTY_CURR,
                   PRODUCT,CITY, DIAL_CODE_GROUP, PERIOD,
                    to_char(START_DATE,''MM/DD/YYYY''),
                                         to_char(END_DATE,''MM/DD/YYYY''),
                                         MONTHLY,EXCLUDED,
                   ''O'' original_flag
                      from outbound_tiers
                      where agreement_id = '''||:P17_ID ||'''
                      order by FIXED_MOBILE_ALL, ID',
         p_generate_md5    => 'YES');
-- INBOUND TIER COLLECTION --
     if htmldb_collection.collection_exists( 'IBTCOLLECTION') = TRUE then
         htmldb_collection.delete_collection(p_collection_name => 'IBTCOLLECTION' );
     end if;
     htmldb_collection.create_collection_from_query(
         p_collection_name => 'IBTCOLLECTION',
         p_query           => 'select ID, AGREEMENT_ID, FIXED_MOBILE_ALL,
                          OF_TYPE,TIER, START_MIN, END_MIN,
                                         REVERT_TO, RATE,CURRENCY,
                                         PENALTY_RATE, PENALTY_CURR,
                          PRODUCT,CITY, DIAL_CODE_GROUP, PERIOD,
                          to_char(START_DATE,''MM/DD/YYYY''),
                                         to_char(END_DATE,''MM/DD/YYYY''),
                                         MONTHLY,EXCLUDED,
                          ''O'' original_flag
                      from inbound_tiers
                      where agreement_id = '''||:P17_ID ||'''
                      order by FIXED_MOBILE_ALL, ID',
         p_generate_md5    => 'YES');
     commit;The tables each of these collections is created from are each about 2000 rows.
This part is working well enough.
Next, when the user chooses to view the tier information (either inbound or Outbound) they navigate to either of two pages that have the on-demand process below triggered on load, after header.
-- This process Loads all of the collections used
-- for the multiple select shuttles --
     -- DCGCOLLECTION
     -- CITYCOLLECTION
     -- PRODCOLLECTION
     -- PRDCOLLECTION
-- It is an on-demand process called on load (after footer) --
DECLARE
   dcg_string long;
   dcg varchar2(100);
   city_string long;
   the_city varchar2(100);
   prod_string long;
   prod varchar2(100);
   prd_string long;
   prd varchar2(100);
   end_char varchar2(1);
   n number;
   CURSOR shuttle_cur IS
      SELECT seq_id obt_seq_id,
             c013 product,
             c014 city,
             c015 dial_code_group,
             c016 period
      FROM htmldb_collections
      WHERE collection_name = 'OBTCOLLECTION';
   shuttle_rec shuttle_cur%ROWTYPE;
BEGIN
-- CREATE OR TRUNCATE DIAL CODE GROUP COLLECTION FOR MULTIPLE SELECT SHUTTLES --
     htmldb_collection.create_or_truncate_collection(
     p_collection_name => 'DCGCOLLECTION');
-- CREATE OR TRUNCATE CITY COLLECTION FOR MULTIPLE SELECT SHUTTLES --
     htmldb_collection.create_or_truncate_collection(
     p_collection_name => 'CITYCOLLECTION');
-- CREATE OR TRUNCATE PRODUCT COLLECTION FOR MULTIPLE SELECT SHUTTLES --
     htmldb_collection.create_or_truncate_collection(
     p_collection_name => 'PRODCOLLECTION');
-- CREATE OR TRUNCATE PERIOD COLLECTION FOR MULTIPLE SELECT SHUTTLES --
     htmldb_collection.create_or_truncate_collection(
     p_collection_name => 'PRDCOLLECTION');
-- LOAD COLLECTIONS BY LOOPING THROUGH CURSOR.
     OPEN shuttle_cur;
     LOOP
        FETCH shuttle_cur INTO shuttle_rec;
        EXIT WHEN shuttle_cur%NOTFOUND;
        -- DIAL CODE GROUP --
        dcg_string := shuttle_rec.dial_code_group ;
        end_char := substr(dcg_string,-1,1);
        if end_char != ';' then
           dcg_string := dcg_string || ';' ;
        end if;
        LOOP
           EXIT WHEN dcg_string is null;
           n := instr(dcg_string,';');
           dcg := ltrim( rtrim( substr( dcg_string, 1, n-1 ) ) );
           dcg_string := substr( dcg_string, n+1 );
           if length(dcg) > 1 then
            htmldb_collection.add_member(
               p_collection_name => 'DCGCOLLECTION',
               p_c001 => shuttle_rec.obt_seq_id,
               p_c002 => dcg,
               p_generate_md5 => 'NO');
           end if;
        END LOOP;
        -- CITY --
        city_string := shuttle_rec.city ;
        end_char := substr(city_string,-1,1);
        if end_char != ';' then
           city_string := city_string || ';' ;
        end if;
        LOOP
           EXIT WHEN city_string is null;
           n := instr(city_string,';');
           the_city := ltrim( rtrim( substr( city_string, 1, n-1 ) ) );
           city_string := substr( city_string, n+1 );
           if length(the_city) > 1 then
            htmldb_collection.add_member(
               p_collection_name => 'CITYCOLLECTION',
               p_c001 => shuttle_rec.obt_seq_id,
               p_c002 => the_city,
               p_generate_md5 => 'NO');
           end if;
        END LOOP;
        -- PRODUCT --
        prod_string := shuttle_rec.product ;
        end_char := substr(prod_string,-1,1);
        if end_char != ';' then
           prod_string := prod_string || ';' ;
        end if;
        LOOP
           EXIT WHEN prod_string is null;
           n := instr(prod_string,';');
           prod := ltrim( rtrim( substr( prod_string, 1, n-1 ) ) );
           prod_string := substr( prod_string, n+1 );
           if length(prod) > 1 then
            htmldb_collection.add_member(
               p_collection_name => 'PRODCOLLECTION',
               p_c001 => shuttle_rec.obt_seq_id,
               p_c002 => prod,
               p_generate_md5 => 'NO');
           end if;
        END LOOP;
        -- PERIOD --
        prd_string := shuttle_rec.period ;
        end_char := substr(prd_string,-1,1);
        if end_char != ';' then
           prd_string := prd_string || ';' ;
        end if;
        LOOP
           EXIT WHEN prd_string is null;
           n := instr(prd_string,';');
           prd := ltrim( rtrim( substr( prd_string, 1, n-1 ) ) );
           prd_string := substr( prd_string, n+1 );
           if length(prd) > 1 then
            htmldb_collection.add_member(
               p_collection_name => 'PRDCOLLECTION',
               p_c001 => shuttle_rec.obt_seq_id,
               p_c002 => prd,
               p_generate_md5 => 'NO');
           end if;
        END LOOP;
     END LOOP;
     CLOSE shuttle_cur;
    commit;
END;Creating these collections from the initial collection is taking way too long. The page is rendered after about 22 seconds (when tier collection has 2 rows) and 10 minutes worst case (when the tier collection has 56 rows).
Thank you in advance for any advice you may have.

Try to instrument/profile your code by putting timing statements after each operation. This way you can tell which parts are taking the most time and address them.

Slow response on AAA Authorization

Similar Messages

Maybe you are looking for