Slow Authentication with Nymi Band Tap
This problem appears when you use a Nymi Band in a Nymi-Evidian integration and you use the Evidian EAM Controller to manage password changes.
When the Evidian EAM Controller manages the password changes and the environment includes a distributed Active Directory configuration, Evidian uses the LsaLogonUser function to determine the Active Directory Domain Controller(DC) name, and then uses the DC that is closest to the access point for a user to manage password changes. Due to an issue with the LsaLogonUser function, the process takes longer than expected.
Manage password changes outside of the Evidian EAM Controller and configure the Evidian EAM Client to avoid the use of the LsaLogonUser function.
To disable the LsaLogonUser function, perform the following actions on each Evidian EAM Client:
- Run regedit.exe, and navigate to HKLM\SOFTWARE\Enatel\WiseGuard\Framework\Directory
- Create a new DWord (32bit) key named CallLsaLogonUserAfterLogon.
- Edit the key, and in the value field, type 0.
- Close regedit.exe.
- Restart the Evidian EAM Client.